PT-2025-52909 · Linux+2 · Linux Kernel+2

Published 2025-11-08 · Updated 2026-04-06 · CVE-2025-68373

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free (UAF) issue related to the management of RAID devices. The problem occurs when removing a RAID device path, potentially leading to a general protection fault. The root cause is a race condition where the del gendisk function is called multiple times, specifically during the device removal and RAID stop processes. A flag, MD DO DELETE, has been introduced to resolve this race condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-01156

CVE-2025-68373

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 417

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68373.json · Exploit
• https://ubuntu.com/security/CVE-2025-68227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8152-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23060 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68742 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68283 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68220 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68362 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40255 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68738 · Vendor Advisory