CVE-2025-68214 — Race Condition in Linux
Severity
4.7MEDIUMNVD
OSV7.2OSV3.2
EPSS
0.0%
top 98.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
timers: Fix NULL function pointer race in timer_shutdown_sync()
There is a race condition between timer_shutdown_sync() and timer
expiration that can lead to hitting a WARN_ON in expire_timers().
The issue occurs when timer_shutdown_sync() clears the timer function
to NULL while the timer is still running on another CPU. The race
scenario looks like this:
CPU0 CPU1
lock_timer_base()
expire_timers()
base->running_timer = tim…
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.0 | Impact: 3.6
Affected Packages7 packages
▶CVEListV5linux/linuxdebbcf812d735003c96c5e5968a3cfa4e1fbd1af — ba43ac025c4318241f8edf94f31d2eebab86991b+6