GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-68336 (GCVE-0-2025-68336)

Vulnerability from cvelistv5 – Published: 2025-12-22 16:14 – Updated: 2026-08-05 12:10
VLAI
Title
locking/spinlock/debug: Fix data-race in do_raw_write_lock
Summary
In the Linux kernel, the following vulnerability has been resolved: locking/spinlock/debug: Fix data-race in do_raw_write_lock KCSAN reports: BUG: KCSAN: data-race in do_raw_write_lock / do_raw_write_lock write (marked) to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1: do_raw_write_lock+0x120/0x204 _raw_write_lock_irq do_exit call_usermodehelper_exec_async ret_from_fork read to 0xffff800009cf504c of 4 bytes by task 1103 on cpu 0: do_raw_write_lock+0x88/0x204 _raw_write_lock_irq do_exit call_usermodehelper_exec_async ret_from_fork value changed: 0xffffffff -> 0x00000001 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 1103 Comm: kworker/u4:1 6.1.111 Commit 1a365e822372 ("locking/spinlock/debug: Fix various data races") has adressed most of these races, but seems to be not consistent/not complete. >From do_raw_write_lock() only debug_write_lock_after() part has been converted to WRITE_ONCE(), but not debug_write_lock_before() part. Do it now.
Severity
7.5 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < 8e5b2cf10844402054b52b489b525dc30cc16908 (git)
Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < c228cb699a07a5f2d596d186bc5c314c99bb8bbf (git)
Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < 93bd23524d63deb80fb85beb2e43fafeb1043d0f (git)
Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < 39d2ef113416f1a4205b03fb0aa2e428d1412c77 (git)
Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < b163a5e8c703201c905d6ec7920ed79d167e8442 (git)
Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < 16b3590c0e1e615757dade098c8fbc0d4f040c76 (git)
Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < 396a9270a7b90886be501611b13aa636f2e8c703 (git)
Affected: 1a365e822372ba24c9da0822bc583894f6f3d821 , < c14ecb555c3ee80eeb030a4e46d00e679537f03a (git)
Affected: 3106fb78d3579c8e9c9b3040f7f7841981919624 (git)
Affected: c0911024ff927ba5c4786b507004cb615be1d776 (git)
Affected: 09226e5c38639437565af01e6009a9286a351d04 (git)
Affected: c7673f01604fa722b9d7c1e29e17cec1b8ae09c5 (git)
Affected: c120c3dbeb76305235c8e557f84d9e2d7d0f5933 (git)
Affected: 4.4.209 , < 4.5 (semver)
Affected: 4.9.209 , < 4.10 (semver)
Affected: 4.14.164 , < 4.15 (semver)
Affected: 4.19.95 , < 4.20 (semver)
Affected: 5.4.11 , < 5.5 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.5
Unaffected: 0 , < 5.5 (semver)
Unaffected: 5.10.248 , ≤ 5.10.* (semver)
Unaffected: 5.15.198 , ≤ 5.15.* (semver)
Unaffected: 6.1.160 , ≤ 6.1.* (semver)
Unaffected: 6.6.120 , ≤ 6.6.* (semver)
Unaffected: 6.12.62 , ≤ 6.12.* (semver)
Unaffected: 6.17.12 , ≤ 6.17.* (semver)
Unaffected: 6.18.1 , ≤ 6.18.* (semver)
Unaffected: 6.19 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/locking/spinlock_debug.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "8e5b2cf10844402054b52b489b525dc30cc16908",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "lessThan": "c228cb699a07a5f2d596d186bc5c314c99bb8bbf",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "lessThan": "93bd23524d63deb80fb85beb2e43fafeb1043d0f",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "lessThan": "39d2ef113416f1a4205b03fb0aa2e428d1412c77",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "lessThan": "b163a5e8c703201c905d6ec7920ed79d167e8442",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "lessThan": "16b3590c0e1e615757dade098c8fbc0d4f040c76",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "lessThan": "396a9270a7b90886be501611b13aa636f2e8c703",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "lessThan": "c14ecb555c3ee80eeb030a4e46d00e679537f03a",
              "status": "affected",
              "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "3106fb78d3579c8e9c9b3040f7f7841981919624",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c0911024ff927ba5c4786b507004cb615be1d776",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "09226e5c38639437565af01e6009a9286a351d04",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c7673f01604fa722b9d7c1e29e17cec1b8ae09c5",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "c120c3dbeb76305235c8e557f84d9e2d7d0f5933",
              "versionType": "git"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.209",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.209",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.164",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.95",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.11",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/locking/spinlock_debug.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.5"
            },
            {
              "lessThan": "5.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.248",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.160",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.62",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.248",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.198",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.160",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.120",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.62",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.17.12",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.1",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "5.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.209",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.209",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.164",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.95",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlocking/spinlock/debug: Fix data-race in do_raw_write_lock\n\nKCSAN reports:\n\nBUG: KCSAN: data-race in do_raw_write_lock / do_raw_write_lock\n\nwrite (marked) to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1:\n do_raw_write_lock+0x120/0x204\n _raw_write_lock_irq\n do_exit\n call_usermodehelper_exec_async\n ret_from_fork\n\nread to 0xffff800009cf504c of 4 bytes by task 1103 on cpu 0:\n do_raw_write_lock+0x88/0x204\n _raw_write_lock_irq\n do_exit\n call_usermodehelper_exec_async\n ret_from_fork\n\nvalue changed: 0xffffffff -\u003e 0x00000001\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 PID: 1103 Comm: kworker/u4:1 6.1.111\n\nCommit 1a365e822372 (\"locking/spinlock/debug: Fix various data races\") has\nadressed most of these races, but seems to be not consistent/not complete.\n\n\u003eFrom do_raw_write_lock() only debug_write_lock_after() part has been\nconverted to WRITE_ONCE(), but not debug_write_lock_before() part.\nDo it now."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - An unauthenticated remote peer can open and terminate concurrent TCP/445 connections to an enabled ksmbd server; its per-connection kthreads exit through do_exit(), tasklist_lock, and do_raw_write_lock().\nAC:L - The attacker controls both sides of the race using simultaneous connections and can repeat attempts until it occurs, without requiring victim-controlled state.\nPR:N - Ksmbd creates connection-handler threads before SMB authentication, so the remote attacker requires neither an account nor kernel privileges.\nUI:N - Once the server is listening, remote connections trigger the complete vulnerable path without victim interaction.\nS:U - A resulting kernel panic or lockup affects the same host security authority and does not cross a virtualization or sandbox boundary.\nC:N - The race concerns in-bounds debug owner bookkeeping and provides no memory-disclosure or arbitrary-read primitive.\nI:N - The actual rwlock and protected data are not corrupted; the fix only annotates existing reads and does not address an overwrite, use-after-free, or control-flow primitive.\nA:H - On DEBUG_SPINLOCK and KCSAN builds, repeated races can generate reports that panic through panic_on_warn or deadlock the console, causing complete system unavailability."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:10:54.280Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/8e5b2cf10844402054b52b489b525dc30cc16908"
        },
        {
          "url": "https://git.kernel.org/stable/c/c228cb699a07a5f2d596d186bc5c314c99bb8bbf"
        },
        {
          "url": "https://git.kernel.org/stable/c/93bd23524d63deb80fb85beb2e43fafeb1043d0f"
        },
        {
          "url": "https://git.kernel.org/stable/c/39d2ef113416f1a4205b03fb0aa2e428d1412c77"
        },
        {
          "url": "https://git.kernel.org/stable/c/b163a5e8c703201c905d6ec7920ed79d167e8442"
        },
        {
          "url": "https://git.kernel.org/stable/c/16b3590c0e1e615757dade098c8fbc0d4f040c76"
        },
        {
          "url": "https://git.kernel.org/stable/c/396a9270a7b90886be501611b13aa636f2e8c703"
        },
        {
          "url": "https://git.kernel.org/stable/c/c14ecb555c3ee80eeb030a4e46d00e679537f03a"
        }
      ],
      "title": "locking/spinlock/debug: Fix data-race in do_raw_write_lock",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68336",
    "datePublished": "2025-12-22T16:14:13.425Z",
    "dateReserved": "2025-12-16T14:48:05.297Z",
    "dateUpdated": "2026-08-05T12:10:54.280Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-68336",
      "date": "2026-09-18",
      "epss": "0.00466",
      "percentile": "0.395"
    },
    "microsoft_vex": {
      "current_release_date": "2026-02-18T02:08:21.000Z",
      "cve": "CVE-2025-68336",
      "id": "msrc_CVE-2025-68336",
      "initial_release_date": "2025-12-02T00:00:00.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "3",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "locking/spinlock/debug: Fix data-race in do_raw_write_lock",
      "url": "https://msrc.microsoft.com/csaf/vex/2025/msrc_cve-2025-68336.json",
      "version": "4"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "kernel/locking/spinlock_debug.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "8e5b2cf10844402054b52b489b525dc30cc16908",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c228cb699a07a5f2d596d186bc5c314c99bb8bbf",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "93bd23524d63deb80fb85beb2e43fafeb1043d0f",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "39d2ef113416f1a4205b03fb0aa2e428d1412c77",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b163a5e8c703201c905d6ec7920ed79d167e8442",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "16b3590c0e1e615757dade098c8fbc0d4f040c76",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "396a9270a7b90886be501611b13aa636f2e8c703",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c14ecb555c3ee80eeb030a4e46d00e679537f03a",
                    "status": "affected",
                    "version": "1a365e822372ba24c9da0822bc583894f6f3d821",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "3106fb78d3579c8e9c9b3040f7f7841981919624",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "c0911024ff927ba5c4786b507004cb615be1d776",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "09226e5c38639437565af01e6009a9286a351d04",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "c7673f01604fa722b9d7c1e29e17cec1b8ae09c5",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "c120c3dbeb76305235c8e557f84d9e2d7d0f5933",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4.5",
                    "status": "affected",
                    "version": "4.4.209",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.10",
                    "status": "affected",
                    "version": "4.9.209",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.15",
                    "status": "affected",
                    "version": "4.14.164",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.20",
                    "status": "affected",
                    "version": "4.19.95",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.5",
                    "status": "affected",
                    "version": "5.4.11",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "kernel/locking/spinlock_debug.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.5"
                  },
                  {
                    "lessThan": "5.5",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.248",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.198",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.160",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.120",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.62",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.17.*",
                    "status": "unaffected",
                    "version": "6.17.12",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.19",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nlocking/spinlock/debug: Fix data-race in do_raw_write_lock\n\nKCSAN reports:\n\nBUG: KCSAN: data-race in do_raw_write_lock / do_raw_write_lock\n\nwrite (marked) to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1:\n do_raw_write_lock+0x120/0x204\n _raw_write_lock_irq\n do_exit\n call_usermodehelper_exec_async\n ret_from_fork\n\nread to 0xffff800009cf504c of 4 bytes by task 1103 on cpu 0:\n do_raw_write_lock+0x88/0x204\n _raw_write_lock_irq\n do_exit\n call_usermodehelper_exec_async\n ret_from_fork\n\nvalue changed: 0xffffffff -\u003e 0x00000001\n\nReported by Kernel Concurrency Sanitizer on:\nCPU: 0 PID: 1103 Comm: kworker/u4:1 6.1.111\n\nCommit 1a365e822372 (\"locking/spinlock/debug: Fix various data races\") has\nadressed most of these races, but seems to be not consistent/not complete.\n\n\u003eFrom do_raw_write_lock() only debug_write_lock_after() part has been\nconverted to WRITE_ONCE(), but not debug_write_lock_before() part.\nDo it now."
          }
        ],
        "id": "CVE-2025-68336",
        "lastModified": "2026-07-30T06:24:38.497",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 7.5,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 3.6,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2025-12-22T17:16:01.357",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/16b3590c0e1e615757dade098c8fbc0d4f040c76"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/396a9270a7b90886be501611b13aa636f2e8c703"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/39d2ef113416f1a4205b03fb0aa2e428d1412c77"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/8e5b2cf10844402054b52b489b525dc30cc16908"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/93bd23524d63deb80fb85beb2e43fafeb1043d0f"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b163a5e8c703201c905d6ec7920ed79d167e8442"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c14ecb555c3ee80eeb030a4e46d00e679537f03a"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/c228cb699a07a5f2d596d186bc5c314c99bb8bbf"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Deferred"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-07-30T10:07:24+00:00",
      "cve": "CVE-2025-68336",
      "id": "CVE-2025-68336",
      "initial_release_date": "2025-12-22T00:00:00+00:00",
      "product_status:known_affected": "232",
      "product_status:known_not_affected": "42",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: locking/spinlock/debug: Fix data-race in do_raw_write_lock",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68336.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.