PT-2025-51631 · Linux+3 · Linux Kernel+3

Published

2025-12-16

·

Updated

2026-05-07

·

CVE-2025-68218

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to lock dependency within the nvme-multipath component. Specifically, test cases nvme/014, 057, and 058 occasionally fail due to a lockdep warning, indicating a potential deadlock. This deadlock arises from dependencies between disk->open mutex, kblockd workqueue completion, and partition scan work completion. The issue is addressed by modifying the workqueue used for partition scanning from kblockd to nvme wq, thereby removing the dependency and preventing the deadlock.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-833

Related Identifiers

BDU:2026-02832
CVE-2025-68218
ECHO-6E81-B5F6-51E3
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1303
OESA-2026-1304
OESA-2026-1305
OPENSUSE-SU-2026:20287-1
SUSE-SU-2026:0263-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8152-1
USN-8165-1
USN-8261-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu