CVE-2025-68218

nvme-multipath: fix lockdep WARN due to partition scan work

State
Published
Severity
7.5 High
Published
Dec 16, 2025
Updated
Oct 15, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

nvme-multipath: fix lockdep WARN due to partition scan work

Blktests test cases nvme/014, 057 and 058 fail occasionally due to a lockdep WARN. As reported in the Closes tag URL, the WARN indicates that a deadlock can happen due to the dependency among disk->open_mutex, kblockd workqueue completion and partition_scan_work completion.

To avoid the lockdep WARN and the potential deadlock, cut the dependency by running the partition_scan_work not by kblockd workqueue but by nvme_wq.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 60de2e03f984cfbcdc12fa552f95087c35a05a98 to before 89456dab7ba5ab63d60945440926673a3205e829Affected
  • 4a57f42e5ed42cb8f1beb262c4f6d3e698939e4e to before e2a897ad5f538d314955c747a0a2edb184fcdecdAffected
  • 1f021341eef41e77a633186e9be5223de2ce5d48 to before ef4ab2a8abe554379e10303ae86f7c501336ba0dAffected
  • 1f021341eef41e77a633186e9be5223de2ce5d48 to before b03eb63288a8ffe3adfb34e68309c8e2edb06d0bAffected
  • 1f021341eef41e77a633186e9be5223de2ce5d48 to before 6d87cd5335784351280f82c47cc8a657271929c3Affected
  • a91b7eddf45afeeb9c5ece11dddff5de0921b00fAffected
  • 6.1.118 to before 6.1.159Affected
  • 6.6.62 to before 6.6.118Affected
  • 6.11.9 to before 6.12Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.1.159 through 6.1.*Not affected
  • 6.6.118 through 6.6.*Not affected
  • 6.12.60 through 6.12.*Not affected
  • 6.17.10 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.