CVE-2025-68247: posix-timers: Plug potential memory leak in do_timer_create()
In the Linux kernel, the following vulnerability has been resolved:
posix-timers: Plug potential memory leak in dotimercreate()
When posix timer creation is set to allocate a given timer ID and the access to the user space value faults, the function terminates without freeing the already allocated posix timer structure.
Move the allocation after the user space access to cure that.
[ tglx: Massaged change log ]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68247?
CVE-2025-68247 has been classified with a medium severity due to its potential to cause a memory leak.
How do I fix CVE-2025-68247?
To fix CVE-2025-68247, update to the latest version of the Linux kernel where this vulnerability has been resolved.
What systems are affected by CVE-2025-68247?
CVE-2025-68247 affects various versions of the Linux kernel that implement posix timers.
What type of vulnerability is CVE-2025-68247?
CVE-2025-68247 is a memory leak vulnerability associated with the function do_timer_create in the posix timer implementation.
Can CVE-2025-68247 be exploited remotely?
CVE-2025-68247 does not represent a direct remote exploitation vulnerability, but it can be triggered by user space access faults.