Skip to main content

Linux Kernel CVE-2025-68357

2025-12-24 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Lifecycle Timeline

2
Analysis Generated
Mar 25, 2026 - 11:22 vuln.today
CVE Published
Dec 24, 2025 - 11:15 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

iomap: allocate s_dio_done_wq for async reads as well

Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.

AnalysisAI

Linux kernel iomap subsystem fails to allocate the s_dio_done_wq workqueue for asynchronous read operations, causing read error completions deferred by commit 222f2c7c6d14 to lack proper execution context and potentially leading to information disclosure or system instability. The vulnerability affects Linux kernel versions where the read error completion deferral was implemented without corresponding workqueue allocation for async reads. With an EPSS score of 0.01% and no evidence of active exploitation, this is a low-probability but correctness-critical issue affecting async I/O error handling on affected kernel versions.

Technical ContextAI

The iomap (I/O mapping) subsystem in the Linux kernel handles direct I/O and memory-mapped I/O operations. Commit 222f2c7c6d14 introduced mandatory deferral of read error completions to a dedicated workqueue (s_dio_done_wq) to ensure error handlers run in proper user context rather than interrupt context. However, the workqueue allocation logic was conditional and only executed for write operations; async read paths were not guaranteed to have this workqueue initialized. When async read errors occur without the workqueue being allocated, error completion handlers may execute in incorrect context, potentially leading to incomplete error handling, information leaks, or kernel stability issues. The root cause is a resource allocation oversight rather than a logic flaw in error handling itself.

Affected ProductsAI

Linux kernel versions are affected from the point where commit 222f2c7c6d14 was merged through versions where the fix was not yet backported. Based on the upstream commit references provided (51297686e00f4d5d941b0f20f12b2f12879d753c, 7fd8720dff2d9c70cf5a1a13b7513af01952ec02, bfc717be833fd9ee41443fde2dea0352a7fca333, c67775cf0da2407f113c1229e350758f4dca0f51), multiple stable kernel series received backports. The vulnerability affects Linux distributions shipping affected kernel versions; specific product versions depend on distribution release dates and patch application. CPE data was not provided in the intelligence sources, preventing precise affected product enumeration. Kernel versions and distributions should be checked against the provided stable commits to determine exact impact.

RemediationAI

Upgrade to a Linux kernel version containing one of the upstream fixes referenced in the stable commits: 51297686e00f4d5d941b0f20f12b2f12879d753c, 7fd8720dff2d9c70cf5a1a13b7513af01952ec02, bfc717be833fd9ee41443fde2dea0352a7fca333, or c67775cf0da2407f113c1229e350758f4dca0f51. For distribution users, check your vendor's kernel security advisory for the patched kernel version in your series (e.g., RHEL, Ubuntu LTS, or Debian stable) and apply the update via your standard package management system. No workarounds are available for the underlying issue; workqueue allocation is mandatory for correct async read error handling. Prioritize patching on servers with high async I/O workloads (NVMe, high-speed storage) and distributed file systems, as these are most likely to trigger affected code paths.

CVE-2022-0847 HIGH POC
7.8 Mar 10

Linux kernel contains a flaw known as 'Dirty Pipe' where improper pipe buffer flag initialization allows unprivileged lo

CVE-2015-1328 HIGH POC
7.8 Nov 28

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

CVE-2017-7308 HIGH POC
7.8 Mar 29

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer

CVE-2017-16995 HIGH POC
7.8 Dec 27

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

CVE-2017-1000112 HIGH POC
7.0 Oct 05

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. Rated high severity (CVSS 7.0). Public ex

CVE-2015-8660 MEDIUM POC
6.7 Dec 28

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

CVE-2012-0056 MEDIUM POC
6.9 Jan 27

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when

CVE-2014-0038 MEDIUM POC
6.9 Feb 06

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo

CVE-2016-8655 HIGH POC
7.8 Dec 08

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

CVE-2016-0728 HIGH POC
7.8 Feb 08

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

CVE-2017-0561 CRITICAL POC
9.8 Apr 07

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary

CVE-2022-2588 MEDIUM POC
5.3 Jan 08

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the h

Share

CVE-2025-68357 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy