CVE-2025-21643

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix kernel async DIO Netfslib needs to be able to handle kernel-initiated asynchronous DIO that is supplied with a bio_vec[] array. Currently, because of the async flag, this gets passed to netfs_extract_user_iter() which throws a warning and fails because it only handles IOVEC and UBUF iterators. This can be triggered through a combination of cifs and a loopback blockdev with something like: mount //my/cifs/share /foo dd if=/dev/zero of=/foo/m0 bs=4K count=1K losetup --sector-size 4096 --direct-io=on /dev/loop2046 /foo/m0 echo hello >/dev/loop2046 This causes the following to appear in syslog: WARNING: CPU: 2 PID: 109 at fs/netfs/iterator.c:50 netfs_extract_user_iter+0x170/0x250 [netfs] and the write to fail. Fix this by removing the check in netfs_unbuffered_write_iter_locked() that causes async kernel DIO writes to be handled as userspace writes. Note that this change relies on the kernel caller maintaining the existence of the bio_vec array (or kvec[] or folio_queue) until the op is complete.

• https://git.kernel.org/stable/c/3f6bc9e3ab9b127171d39f9ac6eca1abb693b731Patch
• https://git.kernel.org/stable/c/9f3a265836844eda30bf34c2584b8011fd4f0f49Patch

Published

Jan 19, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-21638In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21639In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-2164The pixelstats plugin for WordPress is vulnerable to Reflect…6.1
• CVE-2025-21640In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21641In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21642In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21644In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21645In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21646In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21647In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2025-21648In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-21649In the Linux kernel, the following vulnerability has been re…5.5