CVE-2025-68225: lib/test_kho: check if KHO is enabled
Published Dec 16, 2025
·Updated
In the Linux kernel, the following vulnerability has been resolved:
lib/testkho: check if KHO is enabled
We must check whether KHO is enabled prior to issuing KHO commands, otherwise KHO internal data structures are not initialized.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Check whether KHO is enabled before issuing KHO commands, including in lib/test_kho, because KHO internal data structures are not initialized when KHO is disabled.
Linux kernel KHO KHO enabled check = enabled
Event History
Dec 16, 2025
CVE Published
via MITRE·01:57 PM
Data Sourced
via MITRE·01:57 PM
Description
Data Sourced
via NVD·02:15 PM
Description
Frequently Asked Questions
1
What configuration is required for this issue to occur?
The issue occurs when KHO commands are issued while KHO is not enabled. In that state, KHO internal data structures have not been initialized.
2
What is the immediate mitigation if an update cannot be applied?
Avoid issuing KHO commands unless KHO is enabled. This prevents use of uninitialized KHO internal data structures.