CVE-2025-68823: ublk: fix deadlock when reading partition table

Published Jan 13, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ublk: fix deadlock when reading partition table

When one process(such as udev) opens ublk block device (e.g., to read the partition table via bdevopen()), a deadlock[1] can occur:

1. bdevopen() grabs disk->openmutex 2. The process issues read I/O to ublk backend to read partition table 3. In ublkcompleterq(), blkupdaterequest() or blkmqendrequest() runs bio->biendio() callbacks 4. If this triggers fput() on file descriptor of ublk block device, the work may be deferred to current task's task work (see fput() implementation) 5. This eventually calls blkdevrelease() from the same context 6. blkdevrelease() tries to grab disk->openmutex again 7. Deadlock: same task waiting for a mutex it already holds

The fix is to run blkupdaterequest() and blkmqendrequest() with bottom halves disabled. This forces blkdevrelease() to run in kernel work-queue context instead of current task work context, and allows ublk server to make forward progress, and avoids the deadlock.

[axboe: rewrite comment in ublk]

Affected Software

5 affected components
linux/kernel
Linux Linux kernel>=6.0<6.6.124
Linux Linux kernel>=6.7<6.12.70
Linux Linux kernel>=6.13<6.18.3
Linux Linux kernel=6.19-rc1

Event History

Jan 13, 2026
CVE Published
via MITRE·03:29 PM
Data Sourced
via MITRE·03:29 PM
Description
Data Sourced
via NVD·04:16 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2025-68823?

CVE-2025-68823 is classified with a high severity due to the potential for a deadlock affecting system stability.

2

How do I fix CVE-2025-68823?

To fix CVE-2025-68823, update to the latest stable version of the Linux kernel where the deadlock issue is resolved.

3

What systems are affected by CVE-2025-68823?

CVE-2025-68823 affects systems running the vulnerable versions of the Linux kernel that utilize ublk block devices.

4

What causes the deadlock in CVE-2025-68823?

The deadlock in CVE-2025-68823 occurs when a process, such as udev, attempts to open a ublk block device to read the partition table.

5

Is there a workaround for CVE-2025-68823?

Implementing a temporary workaround for CVE-2025-68823 is not recommended; the best approach is to apply the kernel update.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203