Riskcovery

CVE-2025-68374

md: fix rcu protection in md_wakeup_thread

State
Published
Severity
Not scored
Published
Dec 24, 2025
Updated
Oct 21, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

md: fix rcu protection in md_wakeup_thread

We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling md_wakeup_thread(). This means that the RCU pointer has been acquired before rcu_read_lock(), which renders rcu_read_lock() ineffective and could lead to a use-after-free.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4469315439827290923fce4f3f672599cabeb366 to before dc6d1249ee35c1c76700b4b96281daeb7637bce1Affected
  • 4469315439827290923fce4f3f672599cabeb366 to before 21989cb5034c835b212385a2afadf279d8069da0Affected
  • 4469315439827290923fce4f3f672599cabeb366 to before a4bd1caf591faeae44cb10b6517e7dacb5139bdaAffected
  • 4469315439827290923fce4f3f672599cabeb366 to before f98b191f78124405294481dea85f8a22a3eb0a59Affected
  • 4469315439827290923fce4f3f672599cabeb366 to before 0dc76205549b4c25705e54345f211b9f66e018a0Affected
LinuxLinux
  • 6.5Affected
  • before 6.5Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.63 through 6.12.*Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.