CVE-2025-68762
BaseFortify
Publication date: 2026-01-05
Last updated on: 2026-01-08
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability occurs in the Linux kernel's netpoll feature where the work queue is not initialized before error checks during netconsole setup. Specifically, if a device has the IFF_DISABLE_NETPOLL flag, the setup fails early and attempts to clean up by canceling a work queue that has not yet been initialized, causing a kernel warning. The fix involves initializing the work queue at the start of the setup process to prevent this warning and ensure safe cleanup.
How can this vulnerability impact me? :
This vulnerability can cause kernel warnings during netconsole setup failures on devices with the IFF_DISABLE_NETPOLL flag. While it does not describe direct exploitation or security breaches, such kernel warnings may lead to instability or unexpected behavior in the kernel's networking subsystem, potentially affecting system reliability.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update the Linux kernel to a version where the netpoll work queue initialization issue is fixed. This ensures that the work queue is properly initialized before any error checks, preventing kernel warnings and potential instability related to netconsole setup failures on devices with the IFF_DISABLE_NETPOLL flag.