# CVE-2025-38139: linux: In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resettin... CVE-2025-38139 is fixed in 23 products on 1 platform, first by DEBIAN-CVE-2025-38139, released July 3, 2025. It is not reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/cve/CVE-2025-38139 - Priority: High - CVSS: 7.1 (high) - EPSS: 0.0046 - CISA KEV: not listed - Exploited (vendor report): no - Publicly disclosed: no - Published: Jul 3, 2025 ## Description In the Linux kernel, the following vulnerability has been resolved: netfs: Fix oops in write-retry from mis-resetting the subreq iterator Fix the resetting of the subrequest iterator in netfs_retry_write_stream() to use the iterator-reset function as the iterator may have been shortened by a previous retry. In such a case, the amount of data to be written by the subrequest is not "subreq->len" but "subreq->len - subreq->transferred". Without this, KASAN may see an error in iov_iter_revert(): BUG: KASAN: slab-out-of-bounds in iov_iter_revert lib/iov_iter.c:633 [inline] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x443/0x5a0 lib/iov_iter.c:611 Read of size 4 at addr ffff88802912a0b8 by task kworker/u32:7/1147 CPU: 1 UID: 0 PID: 1147 Comm: kworker/u32:7 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 Workqueue: events_unbound netfs_write_collection_worker Call Trace: __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120 print_address_description mm/kasan/report.c:408 [inline] print_report+0xc3/0x670 mm/kasan/report.c:521 kasan_report+0xe0/0x110 mm/kasan/report.c:634 iov_iter_revert lib/iov_iter.c:633 [inline] iov_iter_revert+0x443/0x5a0 lib/iov_iter.c:611 netfs_retry_write_stream fs/netfs/write_retry.c:44 [inline] netfs_retry_writes+0x166d/0x1a50 fs/netfs/write_retry.c:231 netfs_collect_write_results fs/netfs/write_collect.c:352 [inline] netfs_write_collection_worker+0x23fd/0x3830 fs/netfs/write_collect.c:374 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238 process_scheduled_works kernel/workqueue.c:3319 [inline] worker_thread+0x6c8/0xf10 kernel/workqueue.c:3400 kthread+0x3c2/0x780 kernel/kthread.c:464 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:153 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245 ## Where it's fixed | Platform | Product | Fixed in | Fix | Released | |---|---|---|---|---| | Linux | bpftool6.12 amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | bpftool6.12-debuginfo amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel-livepatch-6.12.37-61.105 amzn 2023 | 1:1.0-0.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12 amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-debuginfo amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-debuginfo-common-aarch64 amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-debuginfo-common-x86_64 amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-devel amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-headers amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-libbpf amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-libbpf-debuginfo amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-libbpf-devel amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-libbpf-static amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-modules-extra amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-modules-extra-common amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-tools amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-tools-debuginfo amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | kernel6.12-tools-devel amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | linux Debian 13.5 (trixie) | 6.12.37-1 | [DEBIAN-CVE-2025-38139](https://patchblox.com/security/data/fix/linux/debian-cve-2025-38139.md) | Jul 3, 2025 | | Linux | linux Debian 14 | 6.12.37-1 | [DEBIAN-CVE-2025-38139](https://patchblox.com/security/data/fix/linux/debian-cve-2025-38139.md) | Jul 3, 2025 | | Linux | perf6.12 amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | perf6.12-debuginfo amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | python3-perf6.12 amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | | Linux | python3-perf6.12-debuginfo amzn 2023 | 1:6.12.37-61.105.amzn2023 | [ALAS2023-2025-1130](https://patchblox.com/security/data/fix/linux/alas2023-2025-1130.md) | Jul 29, 2025 | --- Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.