cbcvebase.
CVE-2025-68168
published 2025-12-16

CVE-2025-68168: In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction manager The transaction manager…

PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.13%
3.3th percentile
In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction manager The transaction manager initialization in txInit() was not properly initializing TxBlock[0].waitor waitqueue, causing a crash when txEnd(0) is called on read-only filesystems. When a filesystem is mounted read-only, txBegin() returns tid=0 to indicate no transaction. However, txEnd(0) still gets called and tries to access TxBlock[0].waitor via tid_to_tblock(0), but this waitqueue was never initialized because the initialization loop started at index 1 instead of 0. This causes a 'non-static key' lockdep warning and system crash: INFO: trying to register non-static key in txEnd Fix by ensuring all transaction blocks including TxBlock[0] have their waitqueues properly initialized during txInit().

Affected

39 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.159-1 (bookworm)linux 6.1.159-1 (bookworm)
debianlinux-6.1< linux 6.1.159-1 (bookworm)linux 6.1.159-1 (bookworm)
linuxlinux
linuxlinux
linuxlinux
linuxlinux
linuxlinux>= 2a8807f9f511c64de0c7cc9900a1683e3d72a3e5 < d6af7fce2e162ac68e85d3a11eb6ac8c35b24b64d6af7fce2e162ac68e85d3a11eb6ac8c35b24b64
linuxlinux>= 2febd5f81e4bfba61d9f374dcca628aff374cc56 < a2aa97cde9857f881920635a2e3d3b11769619c5a2aa97cde9857f881920635a2e3d3b11769619c5
linuxlinux>= 4.14.324 < 4.154.15
linuxlinux>= 4.19.293 < 4.204.20
linuxlinux>= 5.10.192 < 5.10.2475.10.247
linuxlinux>= 5.15.123 < 5.15.1975.15.197
linuxlinux>= 5.4.255 < 5.4.3025.4.302
linuxlinux>= 5c094ca994824e038b6a97835ded4e5d1d808504 < 8cae9cf23e0bd424ac904e753639a587543ce03a8cae9cf23e0bd424ac904e753639a587543ce03a
linuxlinux>= 6.1.42 < 6.1.1596.1.159
linuxlinux>= 6.4.7 < 6.56.5
linuxlinux>= 95e2b352c03b0a86c5717ba1d24ea20969abcacc < 2a9575a372182ca075070b3cd77490dcf0c951e72a9575a372182ca075070b3cd77490dcf0c951e7
linuxlinux>= 95e2b352c03b0a86c5717ba1d24ea20969abcacc < cbf2f527ae4ca7c7dabce42e85e8deb58588a37ecbf2f527ae4ca7c7dabce42e85e8deb58588a37e
linuxlinux>= 95e2b352c03b0a86c5717ba1d24ea20969abcacc < 038861414ab383b41dd35abbf9ff0ef715592d53038861414ab383b41dd35abbf9ff0ef715592d53
linuxlinux>= 95e2b352c03b0a86c5717ba1d24ea20969abcacc < 300b072df72694ea330c4c673c035253e07827b8300b072df72694ea330c4c673c035253e07827b8
linuxlinux>= aa7cdf487ab3fa47284daaccc3d7d5de01c6a84c < d2dd7ca05a11685c314e62802a55e8d67a90e974d2dd7ca05a11685c314e62802a55e8d67a90e974
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.159-16.1.159-1
linuxlinux_kernel>= 0 < 6.12.63-16.12.63-1
linuxlinux_kernel>= 0 < 6.17.8-16.17.8-1

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_redhat5.5LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.