Riskcovery

CVE-2025-68336

locking/spinlock/debug: Fix data-race in do_raw_write_lock

State
Published
Severity
7.5 High
Published
Dec 22, 2025
Updated
Oct 16, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

locking/spinlock/debug: Fix data-race in do_raw_write_lock

KCSAN reports:

BUG: KCSAN: data-race in do_raw_write_lock / do_raw_write_lock

write (marked) to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1: do_raw_write_lock+0x120/0x204 _raw_write_lock_irq do_exit call_usermodehelper_exec_async ret_from_fork

read to 0xffff800009cf504c of 4 bytes by task 1103 on cpu 0: do_raw_write_lock+0x88/0x204 _raw_write_lock_irq do_exit call_usermodehelper_exec_async ret_from_fork

value changed: 0xffffffff -> 0x00000001

Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 1103 Comm: kworker/u4:1 6.1.111

Commit 1a365e822372 ("locking/spinlock/debug: Fix various data races") has adressed most of these races, but seems to be not consistent/not complete.

>From do_raw_write_lock() only debug_write_lock_after() part has been converted to WRITE_ONCE(), but not debug_write_lock_before() part. Do it now.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before 8e5b2cf10844402054b52b489b525dc30cc16908Affected
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before c228cb699a07a5f2d596d186bc5c314c99bb8bbfAffected
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before 93bd23524d63deb80fb85beb2e43fafeb1043d0fAffected
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before 39d2ef113416f1a4205b03fb0aa2e428d1412c77Affected
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before b163a5e8c703201c905d6ec7920ed79d167e8442Affected
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before 16b3590c0e1e615757dade098c8fbc0d4f040c76Affected
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before 396a9270a7b90886be501611b13aa636f2e8c703Affected
  • 1a365e822372ba24c9da0822bc583894f6f3d821 to before c14ecb555c3ee80eeb030a4e46d00e679537f03aAffected
  • 3106fb78d3579c8e9c9b3040f7f7841981919624Affected
  • c0911024ff927ba5c4786b507004cb615be1d776Affected
  • 09226e5c38639437565af01e6009a9286a351d04Affected
  • c7673f01604fa722b9d7c1e29e17cec1b8ae09c5Affected
  • c120c3dbeb76305235c8e557f84d9e2d7d0f5933Affected
  • 4.4.209 to before 4.5Affected
  • 4.9.209 to before 4.10Affected
  • 4.14.164 to before 4.15Affected
  • 4.19.95 to before 4.20Affected
  • 5.4.11 to before 5.5Affected
LinuxLinux
  • 5.5Affected
  • before 5.5Not affected
  • 5.10.248 through 5.10.*Not affected
  • 5.15.198 through 5.15.*Not affected
  • 6.1.160 through 6.1.*Not affected
  • 6.6.120 through 6.6.*Not affected
  • 6.12.62 through 6.12.*Not affected
  • 6.17.12 through 6.17.*Not affected
  • 6.18.1 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.