CVE-2025-68336

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-68336
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68336.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68336
Downstream
Related
Published
2025-12-22T16:14:13.425Z
Modified
2026-03-20T12:46:22.986555Z
Summary
locking/spinlock/debug: Fix data-race in do_raw_write_lock
Details

In the Linux kernel, the following vulnerability has been resolved:

locking/spinlock/debug: Fix data-race in dorawwrite_lock

KCSAN reports:

BUG: KCSAN: data-race in dorawwritelock / dorawwritelock

write (marked) to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1: dorawwritelock+0x120/0x204 rawwritelockirq doexit callusermodehelperexecasync retfrom_fork

read to 0xffff800009cf504c of 4 bytes by task 1103 on cpu 0: dorawwritelock+0x88/0x204 rawwritelockirq doexit callusermodehelperexecasync retfrom_fork

value changed: 0xffffffff -> 0x00000001

Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 1103 Comm: kworker/u4:1 6.1.111

Commit 1a365e822372 ("locking/spinlock/debug: Fix various data races") has adressed most of these races, but seems to be not consistent/not complete.

From dorawwritelock() only debugwritelockafter() part has been converted to WRITEONCE(), but not debugwritelockbefore() part. Do it now.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68336.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1a365e822372ba24c9da0822bc583894f6f3d821
Fixed
8e5b2cf10844402054b52b489b525dc30cc16908
Fixed
c228cb699a07a5f2d596d186bc5c314c99bb8bbf
Fixed
93bd23524d63deb80fb85beb2e43fafeb1043d0f
Fixed
39d2ef113416f1a4205b03fb0aa2e428d1412c77
Fixed
b163a5e8c703201c905d6ec7920ed79d167e8442
Fixed
16b3590c0e1e615757dade098c8fbc0d4f040c76
Fixed
396a9270a7b90886be501611b13aa636f2e8c703
Fixed
c14ecb555c3ee80eeb030a4e46d00e679537f03a
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3106fb78d3579c8e9c9b3040f7f7841981919624
Last affected
c0911024ff927ba5c4786b507004cb615be1d776
Last affected
09226e5c38639437565af01e6009a9286a351d04
Last affected
c7673f01604fa722b9d7c1e29e17cec1b8ae09c5
Last affected
c120c3dbeb76305235c8e557f84d9e2d7d0f5933

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68336.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.248
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.198
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.160
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.120
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.62
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.12
Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68336.json"