Search/CVE-2025-71117
● CVE — Medium

CVE-2025-71117

VendorlinuxProductlinux kernelDiscoveredJan 14, 2026UpdatedMar 25, 2026

In the Linux kernel, the following vulnerability has been resolved: block: Remove queue freezing from several sysfs store callbacks Freezing the request queue from inside sysfs store callbacks may cause a deadlock in combination with the dm-multipath driver and the queue_if_no_path option. Additionally, freezing the request queue slows down system boot on systems where sysfs attributes are set synchronously. Fix this by removing the blk_mq_freeze_queue() / blk_mq_unfreeze_queue() calls from the store callbacks that do not strictly need these callbacks. Add the __data_racy annotation to request_queue.rq_timeout to suppress KCSAN data race reports about the rq_timeout reads. This patch may cause a small delay in applying the new settings. For all the attributes affected by this patch, I/O…

CVSS v3.1
5.5 MEDIUM
EPSS
0.10%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
5
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 0.01pp
0.09% → 0.10% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Connections
7 relationships
Timeline
disclosure → media coverage
Jan 14, 2026
Disclosure — published as a CVE record. · last revised by NVD Mar 25, 2026
Apr 16, 2026
ubuntu.com reports: USN-8177-1: Linux kernel vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8177-2: Linux kernel (Real-time) vulnerabilities
Apr 17, 2026
ubuntu.com reports: USN-8183-1: Linux kernel (GCP) vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8245-1: Linux kernel vulnerabilities
May 7, 2026
ubuntu.com reports: USN-8257-1: Linux kernel (Raspberry Pi) vulnerabilities