GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-22125 (GCVE-0-2025-22125)

Vulnerability from cvelistv5 – Published: 2025-04-16 14:13 – Updated: 2026-05-11 21:13
VLAI
Title
md/raid1,raid10: don't ignore IO flags
Summary
In the Linux kernel, the following vulnerability has been resolved: md/raid1,raid10: don't ignore IO flags If blk-wbt is enabled by default, it's found that raid write performance is quite bad because all IO are throttled by wbt of underlying disks, due to flag REQ_IDLE is ignored. And turns out this behaviour exist since blk-wbt is introduced. Other than REQ_IDLE, other flags should not be ignored as well, for example REQ_META can be set for filesystems, clearing it can cause priority reverse problems; And REQ_NOWAIT should not be cleared as well, because io will wait instead of failing directly in underlying disks. Fix those problems by keep IO flags from master bio. Fises: f51d46d0e7cb ("md: add support for REQ_NOWAIT")
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 5404bc7a87b9949cf61e0174b21f80e73239ab25 , < 10f4ff4baeb6951cf58282954318827b6852d501 (git)
Affected: 5404bc7a87b9949cf61e0174b21f80e73239ab25 , < 73506e581c0b1814cdfd2229d589f30751d7de26 (git)
Affected: 5404bc7a87b9949cf61e0174b21f80e73239ab25 , < 8a0adf3d778c4a0893c6d34a9e1b0082a6f1c495 (git)
Affected: 5404bc7a87b9949cf61e0174b21f80e73239ab25 , < e879a0d9cb086c8e52ce6c04e5bfa63825a6213c (git)
guessed Create a notification for this product.
Linux Linux Affected: 2.6.19
Unaffected: 0 , < 2.6.19 (semver)
Unaffected: 6.6.136 , ≤ 6.6.* (semver)
Unaffected: 6.12.46 , ≤ 6.12.* (semver)
Unaffected: 6.14.2 , ≤ 6.14.* (semver)
Unaffected: 6.15 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/raid1.c",
            "drivers/md/raid10.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "10f4ff4baeb6951cf58282954318827b6852d501",
              "status": "affected",
              "version": "5404bc7a87b9949cf61e0174b21f80e73239ab25",
              "versionType": "git"
            },
            {
              "lessThan": "73506e581c0b1814cdfd2229d589f30751d7de26",
              "status": "affected",
              "version": "5404bc7a87b9949cf61e0174b21f80e73239ab25",
              "versionType": "git"
            },
            {
              "lessThan": "8a0adf3d778c4a0893c6d34a9e1b0082a6f1c495",
              "status": "affected",
              "version": "5404bc7a87b9949cf61e0174b21f80e73239ab25",
              "versionType": "git"
            },
            {
              "lessThan": "e879a0d9cb086c8e52ce6c04e5bfa63825a6213c",
              "status": "affected",
              "version": "5404bc7a87b9949cf61e0174b21f80e73239ab25",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/md/raid1.c",
            "drivers/md/raid10.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.19"
            },
            {
              "lessThan": "2.6.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.136",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.46",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.14.*",
              "status": "unaffected",
              "version": "6.14.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.15",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.136",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.46",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.14.2",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.15",
                  "versionStartIncluding": "2.6.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid1,raid10: don\u0027t ignore IO flags\n\nIf blk-wbt is enabled by default, it\u0027s found that raid write performance\nis quite bad because all IO are throttled by wbt of underlying disks,\ndue to flag REQ_IDLE is ignored. And turns out this behaviour exist since\nblk-wbt is introduced.\n\nOther than REQ_IDLE, other flags should not be ignored as well, for\nexample REQ_META can be set for filesystems, clearing it can cause priority\nreverse problems; And REQ_NOWAIT should not be cleared as well, because\nio will wait instead of failing directly in underlying disks.\n\nFix those problems by keep IO flags from master bio.\n\nFises: f51d46d0e7cb (\"md: add support for REQ_NOWAIT\")"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T21:13:27.100Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/10f4ff4baeb6951cf58282954318827b6852d501"
        },
        {
          "url": "https://git.kernel.org/stable/c/73506e581c0b1814cdfd2229d589f30751d7de26"
        },
        {
          "url": "https://git.kernel.org/stable/c/8a0adf3d778c4a0893c6d34a9e1b0082a6f1c495"
        },
        {
          "url": "https://git.kernel.org/stable/c/e879a0d9cb086c8e52ce6c04e5bfa63825a6213c"
        }
      ],
      "title": "md/raid1,raid10: don\u0027t ignore IO flags",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-22125",
    "datePublished": "2025-04-16T14:13:08.779Z",
    "dateReserved": "2024-12-29T08:45:45.823Z",
    "dateUpdated": "2026-05-11T21:13:27.100Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-22125",
      "date": "2026-09-15",
      "epss": "0.00189",
      "percentile": "0.08747"
    },
    "microsoft_vex": {
      "current_release_date": "2026-09-13T01:50:19.000Z",
      "cve": "CVE-2025-22125",
      "id": "msrc_CVE-2025-22125",
      "initial_release_date": "2025-09-03T21:54:28.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "15",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "md/raid1,raid10: don\u0027t ignore IO flags",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-22125.json",
      "version": "13"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-22125\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-04-16T15:16:06.630\",\"lastModified\":\"2026-06-17T08:45:12.100\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nmd/raid1,raid10: don\u0027t ignore IO flags\\n\\nIf blk-wbt is enabled by default, it\u0027s found that raid write performance\\nis quite bad because all IO are throttled by wbt of underlying disks,\\ndue to flag REQ_IDLE is ignored. And turns out this behaviour exist since\\nblk-wbt is introduced.\\n\\nOther than REQ_IDLE, other flags should not be ignored as well, for\\nexample REQ_META can be set for filesystems, clearing it can cause priority\\nreverse problems; And REQ_NOWAIT should not be cleared as well, because\\nio will wait instead of failing directly in underlying disks.\\n\\nFix those problems by keep IO flags from master bio.\\n\\nFises: f51d46d0e7cb (\\\"md: add support for REQ_NOWAIT\\\")\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: md/raid1,raid10: no ignorar los indicadores de E/S. Si blk-wbt est\u00e1 habilitado por defecto, el rendimiento de escritura en RAID es bastante bajo, ya que todas las E/S son limitadas por wbt de los discos subyacentes, debido a que se ignora el indicador REQ_IDLE. Resulta que este comportamiento existe desde la introducci\u00f3n de blk-wbt. Adem\u00e1s de REQ_IDLE, tampoco se deben ignorar otros indicadores; por ejemplo, se puede configurar REQ_META para sistemas de archivos; borrarlo puede causar problemas de inversi\u00f3n de prioridad. REQ_NOWAIT tampoco se debe borrar, ya que la E/S esperar\u00e1 en lugar de fallar directamente en los discos subyacentes. Para solucionar estos problemas, mantenga los indicadores de E/S de la bios maestra. Fises: f51d46d0e7cb (\\\"md: a\u00f1adir soporte para REQ_NOWAIT\\\")\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/md/raid1.c\",\"drivers/md/raid10.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5404bc7a87b9949cf61e0174b21f80e73239ab25\",\"lessThan\":\"10f4ff4baeb6951cf58282954318827b6852d501\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5404bc7a87b9949cf61e0174b21f80e73239ab25\",\"lessThan\":\"73506e581c0b1814cdfd2229d589f30751d7de26\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5404bc7a87b9949cf61e0174b21f80e73239ab25\",\"lessThan\":\"8a0adf3d778c4a0893c6d34a9e1b0082a6f1c495\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5404bc7a87b9949cf61e0174b21f80e73239ab25\",\"lessThan\":\"e879a0d9cb086c8e52ce6c04e5bfa63825a6213c\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/md/raid1.c\",\"drivers/md/raid10.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"2.6.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"2.6.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.136\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.46\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.14.2\",\"lessThanOrEqual\":\"6.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.15\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.6.19\",\"versionEndExcluding\":\"6.12.46\",\"matchCriteriaId\":\"FE5F2FD2-E9C2-4521-AED1-C65EBA5BF5D0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.14.2\",\"matchCriteriaId\":\"633A38C1-75C8-452D-8F1C-DA0269FD2687\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/10f4ff4baeb6951cf58282954318827b6852d501\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/73506e581c0b1814cdfd2229d589f30751d7de26\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/8a0adf3d778c4a0893c6d34a9e1b0082a6f1c495\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e879a0d9cb086c8e52ce6c04e5bfa63825a6213c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-06-30T00:48:20+00:00",
      "cve": "CVE-2025-22125",
      "id": "CVE-2025-22125",
      "initial_release_date": "2025-04-16T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: md/raid1,raid10: don\u0027t ignore IO flags",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-22125.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-02T12:35:25Z",
      "cve": "CVE-2025-22125",
      "id": "CVE-2025-22125",
      "initial_release_date": "2025-04-24T03:25:11Z",
      "product_status:known_affected": "723",
      "product_status:known_not_affected": "34",
      "product_status:recommended": "437",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-22125",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-22125.json",
      "version": "74"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.