Deadlock Vulnerability in Linux Kernel's Zswap Component
Summary
DEBIAN-CVE-2025-22030: In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead() Currently, zswap_cpu_comp_dead() calls crypto_free_acomp() while holding the per-CP... Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, responsible for managing hardware resources and providing essential services to software applications. It includes various subsystems, one of which is zswap, a compressed cache for swap pages. This feature aims to improve performance by reducing the amount of data written to disk. However, vulnerabilities in the kernel can lead to severe system instability and security risks, making it crucial to address them promptly.
Vulnerability Detail
In the Linux kernel, a deadlock vulnerability has been identified in the zswap component, specifically within the zswap_cpu_comp_dead() function. This issue arises when the function calls crypto_free_acomp() while holding the per-CPU acomp_ctx mutex. The crypto_free_acomp() function then attempts to acquire the scomp_lock, which is already held by another operation, leading to a potential ABBA deadlock scenario. This can cause system processes to hang indefinitely, severely impacting system performance and reliability.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
The deadlock vulnerability in the Linux kernel's zswap component poses a significant risk to system stability and performance. It is essential for users to update their systems to the patched version 6.12.25-1 to mitigate this risk. Regular monitoring and prompt updates are crucial in maintaining system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability is a deadlock issue in the zswap component of the Linux kernel, which can lead to system hangs.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Failure to address this vulnerability can result in system instability, performance degradation, and potential data loss due to unresponsive processes.
Yes, the vulnerability is fixed in version 6.12.25-1 of the Linux package.
While there are no specific workarounds, it is advisable to monitor your system closely for any signs of instability until you can apply the patch.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
