Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0015 3.6 —
AFFECTED Product Versions Fixed Linux 1645cd7fd42c236c952e9228badcac4fea1829ea – — Linux 6.12.96 – —
TIMELINE Dec 29 Reserved by Linux Feb 27 Published (CNA: Linux) Sep 7 ENRICHED — CVE-2025-21817 (Linux). Received CVSS 5.5 and CPE data from NVD.
In the Linux kernel, the following vulnerability has been resolved: block: mark GFP_NOIO around sysfs ->store() sysfs ->store is called with queue freezed, meantime we have several ->store() callbacks(update_nr_requests, wbt, scheduler) to allocate memory with GFP_KERNEL which may run into direct reclaim code path, then potential deadlock can be caused. Fix the issue by marking NOIO around sysfs ->store()
| Date | Event | Detail |
|---|---|---|
| December 29, 2024 | Reserved | Reserved by Linux |
| February 27, 2025 | Published | Published (CNA: Linux) |
| September 7, 2026 | ENRICHED | ENRICHED — CVE-2025-21817 (Linux). Received CVSS 5.5 and CPE data from NVD. |
Authoritative record: CVE-2025-21817 at cve.org
Vendors: linux
Weaknesses: CWE-667
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-21817 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
