PT-2026-2504 · Linux+2 · Linux Kernel+2

Published 2025-10-12 · Updated 2026-05-26 · CVE-2025-68772

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0

Description The Linux kernel contains a flaw within the f2fs file system related to handling compression contexts during writeback operations. A race condition can occur when a file is being fsynced, its attributes are modified, or an ioctl operation is performed, potentially leading to a divide error. Specifically, the issue arises when the inode is non-compressed and the cluster size is updated concurrently with the compression context, triggering a division by zero in the f2fs all cluster page ready function. The fix involves introducing an atomic variable within the f2fs inode info structure to track the number of threads calling f2fs write cache pages() and using a semaphore lock to protect updates to this variable, preventing the race condition.

Recommendations Update to Linux kernel version 6.17.0 or later.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

AZL-74387

BDU:2026-00749

CVE-2025-68772

ECHO-8C4E-D922-13F7

MGASA-2026-0017

MGASA-2026-0018

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 722

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68772.json · Exploit
• https://ubuntu.com/security/CVE-2025-40223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40294 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8179-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68233 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71150 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2025-68772 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68311 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40106 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71116 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40341 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68821 · Vendor Advisory