CVE-2025-68374

Updated on 24 Dec 2025

Severity

5.5 Medium severity

Details

CVSS score
5.5

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We attempted to use RCU to protect the pointer ’thread’, but directly passed the value when calling md_wakeup_thread(). This means that the RCU pointer has been acquired before rcu_read_lock(), which renders rcu_read_lock() ineffective and could lead to a use-after-free. A flaw was found in the Linux kernel’s MD RAID subsystem. The RCU protection in md_wakeup_thread() is ineffective because the thread pointer is acquired before the rcu_read_lock() is taken. This ordering error means the pointer can be freed while still in use, leading to a potential use-after-free condition.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Will Not Fix
Ubuntu 24.04 Planned
Ubuntu 24.04 AWS Planned