Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-68357

Опубликовано: 24 дек. 2025
Источник: redhat
CVSS3: 7.1
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.

Отчет

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local access and the occurrence of an error condition during asynchronous direct I/O read processing to trigger a kernel crash. In typical Red Hat Enterprise Linux deployments, an unprivileged local user could potentially cause a denial of service by initiating asynchronous direct I/O reads on affected filesystems that fail, leading to an unallocated workqueue dereference. The issue cannot be exploited remotely, and there is no direct impact on system confidentiality or data integrity.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 10kernelNot affected
Red Hat Enterprise Linux 6kernelNot affected
Red Hat Enterprise Linux 7kernelNot affected
Red Hat Enterprise Linux 7kernel-rtNot affected
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtAffected
Red Hat Enterprise Linux 9kernelNot affected
Red Hat Enterprise Linux 9kernel-rtAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-909
https://bugzilla.redhat.com/show_bug.cgi?id=2424892kernel: iomap: allocate s_dio_done_wq for async reads as well

EPSS

Процентиль: 14%
0.00232
Низкий

7.1 High

CVSS3

Связанные уязвимости

ubuntu
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.

nvd
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.

CVSS3: 5.5
msrc
11 месяцев назад

iomap: allocate s_dio_done_wq for async reads as well

debian
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: i ...

github
11 месяцев назад

In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.

EPSS

Процентиль: 14%
0.00232
Низкий

7.1 High

CVSS3