In the Linux kernel, the following vulnerability has been resolved:
md: fix rcu protection in mdwakeupthread
We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling mdwakeupthread(). This means that the RCU pointer has been acquired before rcureadlock(), which renders rcureadlock() ineffective and could lead to a use-after-free.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68374.json",
"cna_assigner": "Linux"
}