Strix
26.1K

CVE-2025-68357

UnknownEPSS 0.21%

Last modified

CVE-2025-68357 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.

Metrics

EPSS Probability
0.21%

11.1th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e3676761efb20564297250f000cbbd2187de2601, < bfc717be833fd9ee41443fde2dea0352a7fca333; >= 3b5f35085f8159894a0963e2c877527a885201ac, < 51297686e00f4d5d941b0f20f12b2f12879d753c; >= 74c0c1af04ee6982b47237b1c12cff63ffb14460, < c67775cf0da2407f113c1229e350758f4dca0f51; >= ddb4873286e03e193c5a3bebb5fc6fa820e9ee3a, < 7fd8720dff2d9c70cf5a1a13b7513af01952ec02; 53e0fb84cf657acfcfb7bd35da1e43911848a3a3; >= 6.17.13, < 6.18
LinuxLinux>= 6.6.120, < 6.6.130; >= 6.12.63, < 6.12.64

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2025-68357?
In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for async reads.
How severe is CVE-2025-68357?
Severity scoring for CVE-2025-68357 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2025-68357?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2025

View all 2025CVEs →

Are you affected by CVE-2025-68357?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST