CVE-2025-71135
- Source
- https://cve.org/CVERecord?id=CVE-2025-71135
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-71135.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-71135
- Downstream
- Published
- 2026-01-14T15:07:49.891Z
- Modified
- 2026-02-09T19:35:56.674725Z
- Summary
- md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
md/raid5: fix possible null-pointer dereferences in raid5storegroupthreadcnt()
The variable mddev->private is first assigned to conf and then checked:
conf = mddev->private; if (!conf) ...
If conf is NULL, then mddev->private is also NULL. In this case, null-pointer dereferences can occur when calling raid5_quiesce():
raid5quiesce(mddev, true); raid5quiesce(mddev, false);
since mddev->private is assigned to conf again in raid5_quiesce(), and conf is dereferenced in several places, for example:
conf->quiesce = 0; wakeup(&conf->waitfor_quiescent);
To fix this issue, the function should unlock mddev and return before invoking raid5quiesce() when conf is NULL, following the existing pattern in raid5changeconsistencypolicy().
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71135.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/20597b7229aea8b5bc45cd92097640257c7fc33b
- https://git.kernel.org/stable/c/7ad6ef91d8745d04aff9cce7bdbc6320d8e05fe9
- https://git.kernel.org/stable/c/e5abb6af905de6b2fead8a0b3f32ab0b81468a01
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71135.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-71135
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedbe19e6e4339d1579d5f2fae8ce4facf9521dbbfcFixed20597b7229aea8b5bc45cd92097640257c7fc33b
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedfa1944bbe6220eb929e2c02e5e8706b908565711Fixede5abb6af905de6b2fead8a0b3f32ab0b81468a01Fixed7ad6ef91d8745d04aff9cce7bdbc6320d8e05fe9