CVE-2025-68297 — Use of Uninitialized Resource in Linux
Severity
7.2HIGHOSV
OSV3.2
No vectorEPSS
0.0%
top 89.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix crash in process_v2_sparse_read() for encrypted directories
The crash in process_v2_sparse_read() for fscrypt-encrypted directories
has been reported. Issue takes place for Ceph msgr2 protocol in secure
mode. It can be reproduced by the steps:
sudo mount -t ceph :/ /mnt/cephfs/ -o name=admin,fs=cephfs,ms_mode=secure
(1) mkdir /mnt/cephfs/fscrypt-test-3
(2) cp area_decrypted.tar /mnt/cephfs/fscrypt-test-3
(3) fscryp…
Affected Packages6 packages
▶CVEListV5linux/linuxda9c33a70f095d5d55c36d0bfeba969e31de08ae — 5a3f3e39b18705bc578fae58abacc8ef93c15194+5