Riskcovery

CVE-2025-68348

block: fix memory leak in __blkdev_issue_zero_pages

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
May 11, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

block: fix memory leak in __blkdev_issue_zero_pages

Move the fatal signal check before bio_alloc() to prevent a memory leak when BLKDEV_ZERO_KILLABLE is set and a fatal signal is pending.

Previously, the bio was allocated before checking for a fatal signal. If a signal was pending, the code would break out of the loop without freeing or chaining the just-allocated bio, causing a memory leak.

This matches the pattern already used in __blkdev_issue_write_zeroes() where the signal check precedes the allocation.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • bf86bcdb40123ee99669ee91b67e023669433a1a to before 453e4b0c84d0db1454ff0adf655d91179e6fca3aAffected
  • bf86bcdb40123ee99669ee91b67e023669433a1a to before 7957635c679e8a01147163a3a4a1f16e1210fa03Affected
  • bf86bcdb40123ee99669ee91b67e023669433a1a to before 7193407bc4457212fa38ec3aff9c640e63a8dbefAffected
  • bf86bcdb40123ee99669ee91b67e023669433a1a to before f7e3f852a42d7cd8f1af2c330d9d153e30c8adcfAffected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.63 through 6.12.*Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.