Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-68823— ublk: fix deadlock when reading partition table

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于ublk中读取分区表时存在死锁问题。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.13% · P2

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 12

VendorProduct Version RangeStatus
Linux Linux 71f28f3136aff5890cd56de78abc673f8393cad9< 27bb79b7717b2fbb111a1c13548b2786ee712dca affected
71f28f3136aff5890cd56de78abc673f8393cad9< 64c0b7e2293757e8320f13434cd809f1c9257a62 affected
71f28f3136aff5890cd56de78abc673f8393cad9< 9bcc47343ee0ef346aa7b2b460c8ff56bd882fe7 affected
71f28f3136aff5890cd56de78abc673f8393cad9< 0460e09a614291f06c008443f47393c37b7358e7 affected
71f28f3136aff5890cd56de78abc673f8393cad9< c258f5c4502c9667bccf5d76fa731ab9c96687c1 affected
6.0 affected
< 6.0 unaffected
6.1.175≤ 6.1.* unaffected
… +4 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-68823

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ublk: fix deadlock when reading partition table
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such as udev) opens ublk block device (e.g., to read the partition table via bdev_open()), a deadlock[1] can occur: 1. bdev_open() grabs disk->open_mutex 2. The process issues read I/O to ublk backend to read partition table 3. In __ublk_complete_rq(), blk_update_request() or blk_mq_end_request() runs bio->bi_end_io() callbacks 4. If this triggers fput() on file descriptor of ublk block device, the work may be deferred to current task's task work (see fput() implementation) 5. This eventually calls blkdev_release() from the same context 6. blkdev_release() tries to grab disk->open_mutex again 7. Deadlock: same task waiting for a mutex it already holds The fix is to run blk_update_request() and blk_mq_end_request() with bottom halves disabled. This forces blkdev_release() to run in kernel work-queue context instead of current task work context, and allows ublk server to make forward progress, and avoids the deadlock. [axboe: rewrite comment in ublk]
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于ublk中读取分区表时存在死锁问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux 71f28f3136aff5890cd56de78abc673f8393cad9 ~ 27bb79b7717b2fbb111a1c13548b2786ee712dca -
Linux Linux 6.0 -

II. Public POCs for CVE-2025-68823

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-68823

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-68823 (1)

Same Patch Batch · Linux · 2026-01-13 · 93 CVEs total

CVE-2025-71068 9.8 CRITICAL svcrdma: bound check rq_pages index in inline path
CVE-2025-68775 9.8 CRITICAL net/handshake: duplicate handshake cancellations leak socket
CVE-2025-68817 9.8 CRITICAL ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
CVE-2025-68794 9.8 CRITICAL iomap: adjust read range correctly for non-block-aligned positions
CVE-2025-68811 9.8 CRITICAL svcrdma: use rc_pageoff for memcpy byte offset
CVE-2025-68809 9.1 CRITICAL ksmbd: vfs: fix race on m_flags in vfs_cache
CVE-2025-71095 9.1 CRITICAL net: stmmac: fix the crash issue for zero copy XDP_TX action
CVE-2025-71093 9.1 CRITICAL e1000: fix OOB in e1000_tbi_should_accept()
CVE-2025-68818 8.8 HIGH scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path"
CVE-2025-71072 8.2 HIGH shmem: fix recovery on rename failures
CVE-2025-68799 8.1 HIGH caif: fix integer underflow in cffrml_receive()
CVE-2025-68803 8.0 HIGH NFSD: NFSv4 file creation neglects setting ACL
CVE-2025-68819 7.8 HIGH media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg()
CVE-2025-68815 7.8 HIGH net/sched: ets: Remove drr class from the active list if it changes to strict
CVE-2025-71066 7.8 HIGH net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change
CVE-2025-68822 7.8 HIGH Input: alps - fix use-after-free bugs caused by dev3_register_work
CVE-2025-68792 7.8 HIGH tpm2-sessions: Fix out of range indexing in name_size
CVE-2025-68793 7.8 HIGH drm/amdgpu: fix a job->pasid access race in gpu recovery
CVE-2025-71074 7.8 HIGH functionfs: fix the open/removal races
CVE-2025-68795 7.8 HIGH ethtool: Avoid overflowing userspace buffer on stats query

Showing top 20 of 93 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-68823

No comments yet

Leave a comment