CVE-2025-68319 — Linux vulnerability
17 documents8 sources
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 89.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
netconsole: Acquire su_mutex before navigating configs hierarchy
There is a race between operations that iterate over the userdata
cg_children list and concurrent add/remove of userdata items through
configfs. The update_userdata() function iterates over the
nt->userdata_group.cg_children list, and count_extradata_entries() also
iterates over this same list to count nodes.
Quoting from Documentation/filesystems/configfs.rst:
…
Affected Packages5 packages
▶CVEListV5linux/linuxdf03f830d099f0811281a222aefdd9d400fa0b72 — ff70aa7e8cf05745fdba7258952a8bedf33ea336+2
🔴Vulnerability Details
8📋Vendor Advisories
6🕵️Threat Intelligence
1💬Community
1Bugzilla
▶