CVE-2025-68762 — Missing Initialization of Resource in Linux
Severity
7.2HIGHOSV
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 5
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
net: netpoll: initialize work queue before error checks
Prevent a kernel warning when netconsole setup fails on devices with
IFF_DISABLE_NETPOLL flag. The warning (at kernel/workqueue.c:4242 in
__flush_work) occurs because the cleanup path tries to cancel an
uninitialized work queue.
When __netpoll_setup() encounters a device with IFF_DISABLE_NETPOLL,
it fails early and calls skb_pool_flush() for cleanup. This function
calls …
Affected Packages5 packages
▶CVEListV5linux/linux248f6571fd4c51531f7f8f07f186f7ae98a50afc — a90d0dc38a10347078cca60e7495ad0648838f18+3