Vulnerability in Linux
CVE-2025-68168
In the Linux kernel, the following vulnerability has been resolved: jfs: fix uninitialized waitqueue in transaction manager The transaction manager initialization in txInit() was not properly initializing TxBlock[0].waitor waitqueue, causing a crash when txEnd(0) is called on read-only filesystems. When a filesystem is mounted read-only, txBegin() returns tid=0 to indicate no transaction. However, txEnd(0) still gets called and tries to access TxBlock[0].waitor via tid_to_tblock(0), but this waitqueue was never initialized because the initialization loop started at index 1 instead of 0. This causes a 'non-static key' lockdep warning and system crash: INFO: trying to register non-static key in txEnd Fix by ensuring all transaction blocks including TxBlock[0] have their waitqueues properly initialized during txInit().
EPSS: 0.002 (8.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions 2a8807f9f511c64de0c7cc9900a1683e3d72a3e5, 6.1.42, a88efca805bea93cea9187dfd00835aa7093bf1b
References
Frequently asked questions
- What is CVE-2025-68168?
- CVE-2025-68168 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-12-16.
- How severe is CVE-2025-68168?
- High severity. CVSS v3 base score is 7.8 out of 10.