CVE-2025-68373 — Signal Handler Race Condition in Linux

CWE-364 — Signal Handler Race Condition19 documents7 sources
Severity
7.2HIGHOSV
No vector
EPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedDec 24
Latest updateApr 6

Description

In the Linux kernel, the following vulnerability has been resolved: md: avoid repeated calls to del_gendisk There is a uaf problem which is found by case 23rdev-lifetime: Oops: general protection fault, probably for non-canonical address 0xdead000000000122 RIP: 0010:bdi_unregister+0x4b/0x170 Call Trace: __del_gendisk+0x356/0x3e0 mddev_unlock+0x351/0x360 rdev_attr_store+0x217/0x280 kernfs_fop_write_iter+0x14a/0x210 vfs_write+0x29e/0x550 ksys_write+0x74/0xf0 do_syscall_64+0xbb/0x380 entry_SYSC…

Affected Packages5 packages

▶Linuxlinux/linux_kernel6.17.0 — 6.17.13+1
▶Debianlinux/linux_kernel< 6.17.13-1
▶Ubuntulinux/linux_kernel< 6.17.0-19.19
▶CVEListV5linux/linux9e59d609763f70a992a8f3808dabcce60f14eb5c — b4c5cf406062ad44cd178269571530c6435b2f3b+3
▶debiandebian/linux< linux 6.17.13-1 (forky)

🔴Vulnerability Details

9
OSV
linux-oem-6.17 vulnerabilities↗2026-04-06
▶
OSV
linux-raspi vulnerabilities↗2026-04-01
▶
OSV
linux-azure, linux-azure-6.17 vulnerabilities↗2026-03-25
▶
OSV
linux-realtime-6.17 vulnerabilities↗2026-03-23
▶
OSV
linux-gcp-6.17, linux-realtime vulnerabilities↗2026-03-17
▶

📋Vendor Advisories

8
Ubuntu
Linux kernel (OEM) vulnerabilities↗2026-04-06
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2026-04-01
▶
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-03-25
▶
Ubuntu
Linux kernel (Real-time) vulnerabilities↗2026-03-23
▶
Ubuntu
Linux kernel vulnerabilities↗2026-03-17
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-68373 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶