Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks
Debian's DSA-6528-1 updates Trixie's Linux kernel to 6.12.111-1, fixing 1,313 CVE entries covering privilege escalation, DoS, and information leaks.
50
CVE-2025-21817
- CVSS 3.1
- 5.5 medium
- EPSS
- <1%p4
- Published
- ·
- Modified
Description · NVD
In the Linux kernel, the following vulnerability has been resolved: block: mark GFP_NOIO around sysfs ->store() sysfs ->store is called with queue freezed, meantime we have several ->store() callbacks(update_nr_requests, wbt, scheduler) to allocate memory with GFP_KERNEL which may run into direct reclaim code path, then potential deadlock can be caused. Fix the issue by marking NOIO around sysfs ->store()
In the news
2 storiesSeveral vulnerabilities have been discovered in the Linux kernel
Debian published DSA-6528-1, a Linux kernel update covering hundreds of CVEs.
35