CVE-2025-68299 — Race Condition within a Thread in Linux
Severity
7.2HIGHOSV
No vectorEPSS
0.1%
top 69.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix delayed allocation of a cell's anonymous key
The allocation of a cell's anonymous key is done in a background thread
along with other cell setup such as doing a DNS upcall. In the reported
bug, this is triggered by afs_parse_source() parsing the device name given
to mount() and calling afs_lookup_cell() with the name of the cell.
The normal key lookup then tries to use the key description on the
anonymous authenticat…
Affected Packages5 packages
▶CVEListV5linux/linux7e33b15d5a6578a99ebf189cea34983270ae92dd — 5613bde937dfac6725e9c3fc766b9d6b8481e55b+2