CVE-2025-68212

Source
https://cve.org/CVERecord?id=CVE-2025-68212
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68212.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68212
Downstream
Published
2025-12-16T13:57:08.327Z
Modified
2026-03-12T04:31:43.672702Z
Summary
fs: Fix uninitialized 'offp' in statmount_string()
Details

In the Linux kernel, the following vulnerability has been resolved:

fs: Fix uninitialized 'offp' in statmount_string()

In statmountstring(), most flags assign an output offset pointer (offp) which is later updated with the string offset. However, the STATMOUNTMNTUIDMAP and STATMOUNTMNT_GIDMAP cases directly set the struct fields instead of using offp. This leaves offp uninitialized, leading to a possible uninitialized dereference when *offp is updated.

Fix it by assigning offp for UIDMAP and GIDMAP as well, keeping the code path consistent.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68212.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
37c4a9590e1efcae7749682239fc22a330d2d325
Fixed
acfde9400e611c8d2668f1c70053c4a1d6ecfc36
Fixed
0778ac7df5137d5041783fadfc201f8fd55a1d9b

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68212.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.15.0
Fixed
6.17.10

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68212.json"