CVE-2025-68807 — Missing Initialization of Resource in Linux
Severity
6.4MEDIUM
No vectorEPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
block: fix race between wbt_enable_default and IO submission
When wbt_enable_default() is moved out of queue freezing in elevator_change(),
it can cause the wbt inflight counter to become negative (-1), leading to hung
tasks in the writeback path. Tasks get stuck in wbt_wait() because the counter
is in an inconsistent state.
The issue occurs because wbt_enable_default() could race with IO submission,
allowing the counter to b…
Affected Packages7 packages
▶CVEListV5linux/linux78c271344b6f64ce24c845e54903e09928cf2061 — f55201fb3becff6a903fd29f4d1147cc7e91eb0c+2
🔴Vulnerability Details
3GHSA▶
GHSA-89m4-pmw6-jxqj: In the Linux kernel, the following vulnerability has been resolved:
block: fix race between wbt_enable_default and IO submission
When wbt_enable_def↗2026-01-13
OSV▶
CVE-2025-68807: In the Linux kernel, the following vulnerability has been resolved: block: fix race between wbt_enable_default and IO submission When wbt_enable_defau↗2026-01-13
📋Vendor Advisories
5Debian▶
CVE-2025-68807: linux - In the Linux kernel, the following vulnerability has been resolved: block: fix ...↗2025