CVE-2025-68240
- Source
- https://cve.org/CVERecord?id=CVE-2025-68240
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68240.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-68240
- Aliases
- Downstream
- Published
- 2025-12-16T14:21:17.710Z
- Modified
- 2026-01-14T18:58:35.682597Z
- Summary
- nilfs2: avoid having an active sc_timer before freeing sci
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
nilfs2: avoid having an active sc_timer before freeing sci
Because kthreadstop did not stop sctask properly and returned -EINTR, the sctimer was not properly closed, ultimately causing the problem [1] reported by syzbot when freeing sci due to the sctimer not being closed.
Because the thread sctask main function nilfssegctorthread() returns 0 when it succeeds, when the return value of kthreadstop() is not 0 in nilfssegctordestroy(), we believe that it has not properly closed sc_timer.
We use timershutdownsync() to sync wait for sctimer to shutdown, and set the value of sctask to NULL under the protection of lock scstatelock, so as to avoid the issue caused by sc_timer not being properly shutdowned.
[1] ODEBUG: free active (active state 0) object: 00000000dacb411a object type: timerlist hint: nilfsconstructiontimeout Call trace: nilfssegctordestroy fs/nilfs2/segment.c:2811 [inline] nilfsdetachlogwriter+0x668/0x8cc fs/nilfs2/segment.c:2877 nilfsputsuper+0x4c/0x12c fs/nilfs2/super.c:509
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68240.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/2f65799e2a736d556d306440c4e1e8906736117a
- https://git.kernel.org/stable/c/36049e81dc7f077e0e24d5b9688a7458beacef8f
- https://git.kernel.org/stable/c/9a6b60cb147d53968753a34805211d2e5e08c027
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68240.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-68240
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced3f66cc261ccb54a8e4d8d5aa51c389c19453b00cFixed36049e81dc7f077e0e24d5b9688a7458beacef8fFixed2f65799e2a736d556d306440c4e1e8906736117aFixed9a6b60cb147d53968753a34805211d2e5e08c027