CVE-2025-68171 — Incorrect Synchronization in Linux

CWE-821 — Incorrect Synchronization33 documents7 sources
Severity
3.2LOWOSV
No vector
EPSS
0.1%
top 84.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedDec 16
Latest updateApr 9

Description

In the Linux kernel, the following vulnerability has been resolved: x86/fpu: Ensure XFD state on signal delivery Sean reported [1] the following splat when running KVM tests: WARNING: CPU: 232 PID: 15391 at xfd_validate_state+0x65/0x70 Call Trace: fpu__clear_user_states+0x9c/0x100 arch_do_signal_or_restart+0x142/0x210 exit_to_user_mode_loop+0x55/0x100 do_syscall_64+0x205/0x2c0 entry_SYSCALL_64_after_hwframe+0x4b/0x53 Chao further identified [2] a reproducible scenario involving signal deliv…

Affected Packages6 packages

▶Linuxlinux/linux_kernel5.16.0 — 6.1.159+3
▶Debianlinux/linux_kernel< 6.1.159-1+2
▶Ubuntulinux/linux_kernel< 6.8.0-106.106+1
▶CVEListV5linux/linux672365477ae8afca5a1cca98c1deb733235e4525 — eefbfb722042fc9210d2e0ac2b063fd1abf51895+5
▶debiandebian/linux< linux 6.1.159-1 (bookworm)

🔴Vulnerability Details

16
OSV
linux-raspi, linux-raspi-realtime vulnerabilities↗2026-04-01
▶
OSV
linux-azure-6.8 vulnerabilities↗2026-03-25
▶
OSV
linux-azure vulnerabilities↗2026-03-25
▶
OSV
linux-aws-6.8 vulnerabilities↗2026-03-23
▶
OSV
linux-realtime, linux-realtime-6.8 vulnerabilities↗2026-03-17
▶

📋Vendor Advisories

15
Ubuntu
Linux kernel (Azure FIPS) vulnerabilities↗2026-04-09
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (AWS) vulnerabilities↗2026-03-23
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-68171 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶