PT-2025-52884 · Linux+3 · Linux Kernel+3

Published 2025-12-04 · Updated 2026-04-06 · CVE-2025-68348

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak existed in the blkdev issue zero pages function within the block subsystem of the Linux kernel. The issue occurred because the check for a fatal signal was performed after memory allocation via bio alloc(). If a fatal signal was pending, the allocated bio was not freed or chained, resulting in a memory leak when BLKDEV ZERO KILLABLE was set. The fix moves the fatal signal check before the bio alloc() call, mirroring the pattern used in blkdev issue write zeroes().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Memory Leak

Weakness Enumeration

CWE-404

CWE-401

Related Identifiers

BDU:2026-01160

CVE-2025-68348

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 843

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68348.json · Exploit
• https://ubuntu.com/security/CVE-2025-68227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68738 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8094-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68301 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68215 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40250 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68256 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8094-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68359 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68259 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68234 · Vendor Advisory