CVE-2025-68212 — Linux vulnerability
20 documents8 sources
Severity
7.2HIGHOSV
No vectorEPSS
0.0%
top 89.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
fs: Fix uninitialized 'offp' in statmount_string()
In statmount_string(), most flags assign an output offset pointer (offp)
which is later updated with the string offset. However, the
STATMOUNT_MNT_UIDMAP and STATMOUNT_MNT_GIDMAP cases directly set the
struct fields instead of using offp. This leaves offp uninitialized,
leading to a possible uninitialized dereference when *offp is updated.
Fix it by assigning offp for UIDMAP …
Affected Packages5 packages
▶CVEListV5linux/linux37c4a9590e1efcae7749682239fc22a330d2d325 — acfde9400e611c8d2668f1c70053c4a1d6ecfc36+2