Stack Memory Vulnerability in Linux Kernel's RAID1 Functionality

CVE-2025-38445

What is CVE-2025-38445?

A vulnerability identified in the Linux Kernel's RAID1 functionality can lead to critical system instability due to improper handling of stack memory. In the raid1_reshape function, newpool is allocated on the stack and erroneously assigned to conf->r1bio_pool. This issue exposes the system to a scenario where accessing the wait.head of r1bio_pool could reference an invalid stack address, ultimately resulting in a kernel panic when subsequent operations attempt to access this memory. Proper reassignment of memory pool structures is necessary to mitigate potential crashes.

References