Heimdall Security Logo

CVE-2025-68336

Vulnérabilité élevée dans Linux (Linux)

CVSS 7.5 · Élevée
EPSS 0.5%
Linux•Linux•Versions : <=6.1.*, <=6.12.*, 6.18.1, 6.1.160, 0, 4.19.95, 4.14.164, <396a9270a7b90886be501611b13aa636f2e8c703, <c14ecb555c3ee80eeb030a4e46d00e679537f03a, 6.6.120, <4.10, 6.17.12, 5.15.198, <4.20, <=5.10.*, <=6.6.*, <b163a5e8c703201c905d6ec7920ed79d167e8442, <c228cb699a07a5f2d596d186bc5c314c99bb8bbf, <4.5, 1a365e822372ba24c9da0822bc583894f6f3d821, <8e5b2cf10844402054b52b489b525dc30cc16908, <5.5, c7673f01604fa722b9d7c1e29e17cec1b8ae09c5, <=6.18.*, <39d2ef113416f1a4205b03fb0aa2e428d1412c77, 3106fb78d3579c8e9c9b3040f7f7841981919624, 6.12.62, 5.5, 09226e5c38639437565af01e6009a9286a351d04, c120c3dbeb76305235c8e557f84d9e2d7d0f5933, 5.10.248, 5.4.11, <=*, <16b3590c0e1e615757dade098c8fbc0d4f040c76, <=5.15.*, <=6.17.*, 6.19, <4.15, <93bd23524d63deb80fb85beb2e43fafeb1043d0f, c0911024ff927ba5c4786b507004cb615be1d776, 4.9.209, 4.4.209

Description

In the Linux kernel, the following vulnerability has been resolved: locking/spinlock/debug: Fix data-race in do_raw_write_lock KCSAN reports: BUG: KCSAN: data-race in do_raw_write_lock / do_raw_write_lock write (marked) to 0xffff800009cf504c of 4 bytes by task 1102 on cpu 1: do_raw_write_lock+0x120/0x204 _raw_write_lock_irq do_exit call_usermodehelper_exec_async ret_from_fork read to 0xffff800009cf504c of 4 bytes by task 1103 on cpu 0: do_raw_write_lock+0x88/0x204 _raw_write_lock_irq do_exit call_usermodehelper_exec_async ret_from_fork value changed: 0xffffffff -> 0x00000001 Reported by Kernel Concurrency Sanitizer on: CPU: 0 PID: 1103 Comm: kworker/u4:1 6.1.111 Commit 1a365e822372 ("locking/spinlock/debug: Fix various data races") has adressed most of these races, but seems to be not consistent/not complete. >From do_raw_write_lock() only debug_write_lock_after() part has been converted to WRITE_ONCE(), but not debug_write_lock_before() part. Do it now.

Gravité et risque d'exploitation

CVE-2025-68336 obtient un score CVSS de 7.5/10, soit une gravité élevée. Selon le modèle EPSS, la probabilité qu'elle soit exploitée dans les 30 prochains jours est de 0.47 %, ce qui la place devant 39.0 % des CVE référencées.

Que faire ?

  • Vérifiez si Linux (versions <=6.1.*, <=6.12.*, 6.18.1, 6.1.160, 0, 4.19.95, 4.14.164, <396a9270a7b90886be501611b13aa636f2e8c703, <c14ecb555c3ee80eeb030a4e46d00e679537f03a, 6.6.120, <4.10, 6.17.12, 5.15.198, <4.20, <=5.10.*, <=6.6.*, <b163a5e8c703201c905d6ec7920ed79d167e8442, <c228cb699a07a5f2d596d186bc5c314c99bb8bbf, <4.5, 1a365e822372ba24c9da0822bc583894f6f3d821, <8e5b2cf10844402054b52b489b525dc30cc16908, <5.5, c7673f01604fa722b9d7c1e29e17cec1b8ae09c5, <=6.18.*, <39d2ef113416f1a4205b03fb0aa2e428d1412c77, 3106fb78d3579c8e9c9b3040f7f7841981919624, 6.12.62, 5.5, 09226e5c38639437565af01e6009a9286a351d04, c120c3dbeb76305235c8e557f84d9e2d7d0f5933, 5.10.248, 5.4.11, <=*, <16b3590c0e1e615757dade098c8fbc0d4f040c76, <=5.15.*, <=6.17.*, 6.19, <4.15, <93bd23524d63deb80fb85beb2e43fafeb1043d0f, c0911024ff927ba5c4786b507004cb615be1d776, 4.9.209, 4.4.209) est présent sur votre parc.
  • Appliquez le correctif ou la version corrigée indiqués dans les références de l'éditeur.
  • À défaut de correctif, limitez l'exposition (filtrage réseau, désactivation du composant).
  • Automatisez la détection : les agents CVE Heimdall (gratuits, open source) corrèlent l'inventaire de vos serveurs avec la base CVE.

Références

Rechercher une autre CVE