CVE-2025-68374: md: fix rcu protection in md_wakeup_thread
In the Linux kernel, the following vulnerability has been resolved:
md: fix rcu protection in mdwakeupthread
We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling mdwakeupthread(). This means that the RCU pointer has been acquired before rcureadlock(), which renders rcureadlock() ineffective and could lead to a use-after-free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68374?
CVE-2025-68374 is classified as a medium severity vulnerability.
How do I fix CVE-2025-68374?
To fix CVE-2025-68374, you should update to the latest version of the affected Linux kernel.
What is affected by CVE-2025-68374?
CVE-2025-68374 affects the Microsoft azl3 kernel version 6.6.117.1-1.
What type of vulnerability is CVE-2025-68374?
CVE-2025-68374 is a race condition vulnerability within the Linux kernel's md subsystem.
Is CVE-2025-68374 exploitable?
Yes, CVE-2025-68374 could potentially be exploited to disrupt system stability or lead to unauthorized information access.