CVE-2025-68762: net: netpoll: initialize work queue before error checks
In the Linux kernel, the following vulnerability has been resolved:
net: netpoll: initialize work queue before error checks
Prevent a kernel warning when netconsole setup fails on devices with IFFDISABLENETPOLL flag. The warning (at kernel/workqueue.c:4242 in flushwork) occurs because the cleanup path tries to cancel an uninitialized work queue.
When netpollsetup() encounters a device with IFFDISABLENETPOLL, it fails early and calls skbpoolflush() for cleanup. This function calls cancelworksync(&np->refillwq), but refillwq hasn't been initialized yet, triggering the warning.
Move INITWORK() to the beginning of netpollsetup(), ensuring the work queue is properly initialized before any potential failure points. This allows the cleanup path to safely cancel the work queue regardless of where the setup fails.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68762?
CVE-2025-68762 is considered a low-severity vulnerability as it primarily results in kernel warnings rather than a security breach.
How do I fix CVE-2025-68762?
To resolve CVE-2025-68762, users should update their Linux kernel to the latest version where this issue has been addressed.
What causes the warning in CVE-2025-68762?
The warning in CVE-2025-68762 occurs when netconsole setup fails on devices configured with the IFF_DISABLE_NETPOLL flag.
In which Linux versions is CVE-2025-68762 present?
CVE-2025-68762 can affect various Linux kernel versions prior to the patching updates made in response to this vulnerability.
Does CVE-2025-68762 affect all Linux distributions?
CVE-2025-68762 may affect various distributions that utilize the vulnerable Linux kernel, but the impact may vary based on the configuration.