Vulnerability in Linux

CVE-2025-68250

In the Linux kernel, the following vulnerability has been resolved: hung_task: fix warnings caused by unaligned lock pointers The blocker tracking mechanism assumes that lock pointers are at least 4-byte aligned to use their lower bits for type encoding. However, as reported by Eero Tamminen, some architectures like m68k only guarantee 2-byte alignment of 32-bit values. This breaks the assumption and causes two related WARN_ON_ONCE checks to trigger. To fix this, the runtime checks are adjusted to silently ignore any lock that is not 4-byte aligned, effectively disabling the feature in such cases and avoiding the related warnings. Thanks to Geert Uytterhoeven for bisecting!

EPSS: 0.002 (4.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H.

Affected products

  • Linux — versions e711faaafbe54a884f33b53472434063d342f6d4, 6.16, 0

References

Frequently asked questions

What is CVE-2025-68250?
CVE-2025-68250 is a high-severity vulnerability in Linux. CVSS score: 8.2/10. Published 2025-12-16.
How severe is CVE-2025-68250?
High severity. CVSS v3 base score is 8.2 out of 10.