CVE-2025-68336

write (marked) to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1: dorawwritelock+0x120/0x204 rawwritelockirq doexit callusermodehelperexecasync retfrom_fork

read to 0xffff800009cf504c of 4 bytes by task 1103 on cpu 0: dorawwritelock+0x88/0x204 rawwritelockirq doexit callusermodehelperexecasync retfrom_fork

value changed: 0xffffffff -> 0x00000001

Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 1103 Comm: kworker/u4:1 6.1.111

Commit 1a365e822372 ("locking/spinlock/debug: Fix various data races") has adressed most of these races, but seems to be not consistent/not complete.

From dorawwritelock() only debugwritelockafter() part has been converted to WRITEONCE(), but not debugwritelockbefore() part. Do it now.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68336.json",
    "cna_assigner": "Linux"
}

References

Affected packages

Linux / Kernel

Package

Name: Kernel

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.5.0

Fixed

5.10.248

Type: ECOSYSTEM
Events: Introduced

5.11.0

Fixed

5.15.198

Type: ECOSYSTEM
Events: Introduced

5.16.0

Fixed

6.1.160

Type: ECOSYSTEM
Events: Introduced

6.2.0

Fixed

6.6.120

Type: ECOSYSTEM
Events: Introduced

6.7.0

Fixed

6.12.62

Type: ECOSYSTEM
Events: Introduced

6.13.0

Fixed

6.17.12

Type: ECOSYSTEM
Events: Introduced

6.18.0

Fixed

6.18.1

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68336.json"