CVE-2025-68186

Updated on 16 Dec 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not warn in ring_buffer_map_get_reader() when reader catches up The function ring_buffer_map_get_reader() is a bit more strict than the other get reader functions, and except for certain situations the rb_get_reader_page() should not return NULL. If it does, it triggers a warning. This warning was triggering but after looking at why, it was because another acceptable situation was happening and it wasn’t checked for. If the reader catches up to the writer and there’s still data to be read on the reader page, then the rb_get_reader_page() will return NULL as there’s no new page to get. In this situation, the reader page should not be updated and no warning should trigger. A flaw was found in the Linux kernel. An issue in the ring-buffer component, specifically within the ring_buffer_map_get_reader() function, can lead to an incorrect warning. This occurs when a reader catches up to a writer, causing the rb_get_reader_page() function to return NULL unexpectedly. A local user could exploit this to cause a Denial of Service (DoS).

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Will Not Fix