CVE-2025-68348

Source
https://cve.org/CVERecord?id=CVE-2025-68348
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68348.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-68348
Downstream
Related
Published
2025-12-24T10:32:40.561Z
Modified
2026-05-15T04:14:11.949818101Z
Summary
block: fix memory leak in __blkdev_issue_zero_pages
Details

In the Linux kernel, the following vulnerability has been resolved:

block: fix memory leak in _blkdevissuezeropages

Move the fatal signal check before bioalloc() to prevent a memory leak when BLKDEVZERO_KILLABLE is set and a fatal signal is pending.

Previously, the bio was allocated before checking for a fatal signal. If a signal was pending, the code would break out of the loop without freeing or chaining the just-allocated bio, causing a memory leak.

This matches the pattern already used in _blkdevissuewritezeroes() where the signal check precedes the allocation.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68348.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.12.63
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.13
Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.2

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-68348.json"