Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2025-68374 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling md_wakeup_thread(). This means that the RCU pointer has been acquired before rcu_read_lock(), which renders rcu_read_lock() ineffective and could lead to a use-after-free.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0dc76205549b4c25705e54345f211b9f66e018a0 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/21989cb5034c835b212385a2afadf279d8069da0 kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/a4bd1caf591faeae44cb10b6517e7dacb5139bda kernel.orgSource CodeVendor
https://git.kernel.org/stable/c/f98b191f78124405294481dea85f8a22a3eb0a59 kernel.orgSource CodeVendor

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

ProductVersions
Linux kernel
All versions

CPE

  • cpe:2.3:o:kernel:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:endpoint_security_linux_threat_prevention:*:*
  • cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*:*

Remediation

  • Upgrade: linux-0dc76205549b4c25705e54345f211b9f66e018a0.tar.gzmoderate effort
  • Upgrade: linux-21989cb5034c835b212385a2afadf279d8069da0.tar.gzmoderate effort
  • Upgrade: linux-a4bd1caf591faeae44cb10b6517e7dacb5139bda.tar.gzmoderate effort
  • Upgrade: linux-f98b191f78124405294481dea85f8a22a3eb0a59.tar.gzmoderate effort

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2025-68374
NVD Published Date:
Dec 24, 2025
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2025-68374 Details - Not Deferred