CVE-2025-68348: block: fix memory leak in __blkdev_issue_zero_pages
In the Linux kernel, the following vulnerability has been resolved:
block: fix memory leak in blkdevissuezeropages
Move the fatal signal check before bioalloc() to prevent a memory leak when BLKDEVZEROKILLABLE is set and a fatal signal is pending.
Previously, the bio was allocated before checking for a fatal signal. If a signal was pending, the code would break out of the loop without freeing or chaining the just-allocated bio, causing a memory leak.
This matches the pattern already used in blkdevissuewritezeroes() where the signal check precedes the allocation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68348?
CVE-2025-68348 is considered a moderate severity vulnerability due to the potential for a memory leak in the Linux kernel.
How do I fix CVE-2025-68348?
To fix CVE-2025-68348, update your Linux kernel to the latest version that includes the patch addressing this memory leak.
What software is affected by CVE-2025-68348?
CVE-2025-68348 affects the Linux kernel across various distributions that include this code path.
What are the implications of CVE-2025-68348?
The implications of CVE-2025-68348 include potential increased resource consumption and possible service disruptions due to memory leaks.
When was CVE-2025-68348 resolved?
CVE-2025-68348 was resolved in a patch released in the Linux kernel after the identification of the vulnerability.