CVE-2025-68756: block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock
block: Use RCU in blkmq[un]quiescetagset() instead of set->taglistlock
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Update blk_mq_[un]quiesce_tagset() to use RCU instead of set->tag_list_lock, and update blk_mq_{add,del}_queue_tag_set() to use RCU for safe set->tag_list operations; quiesce the tagset's current queues before changing tagset state and remove INIT_LIST_HEAD(&q->tag_set_list).
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68756?
The severity of CVE-2025-68756 is considered high due to its impact on the stability and performance of the Linux kernel.
How do I fix CVE-2025-68756?
To fix CVE-2025-68756, update your Linux kernel to the latest stable version that includes the security patch addressing this vulnerability.
What systems are affected by CVE-2025-68756?
CVE-2025-68756 affects systems running vulnerable versions of the Linux kernel.
What does CVE-2025-68756 involve?
CVE-2025-68756 involves a vulnerability in the Linux kernel's block subsystem related to improper handling of tagsets.
Is there a workaround for CVE-2025-68756?
There is no recommended workaround for CVE-2025-68756 other than applying the appropriate kernel updates.