CVE-2025-68250

Linux Kernel 6.16-6.17.5 - Denial of Service via Unaligned Lock Pointer Handling

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: hung_task: fix warnings caused by unaligned lock pointers The blocker tracking mechanism assumes that lock pointers are at least 4-byte aligned to use their lower bits for type encoding. However, as reported by Eero Tamminen, some architectures like m68k only guarantee 2-byte alignment of 32-bit values. This breaks the assumption and causes two related WARN_ON_ONCE checks to trigger. To fix this, the runtime checks are adjusted to silently ignore any lock that is not 4-byte aligned, effectively disabling the feature in such cases and avoiding the related warnings. Thanks to Geert Uytterhoeven for bisecting!

Scores

EPSS 0.0003
EPSS Percentile 7.8%

Details

Status published
Products (7)
linux/Kernel 6.16.0 - 6.17.6linux
Linux/Linux < 6.16
Linux/Linux 6.16
Linux/Linux 6.17.6 - 6.17.*
Linux/Linux 6.18
Linux/Linux e711faaafbe54a884f33b53472434063d342f6d4 - c0e2dcbe54cb15ecdf9d8f4501c6720423243888
Linux/Linux e711faaafbe54a884f33b53472434063d342f6d4 - c97513cddcfc235f2522617980838e500af21d01
Published Dec 16, 2025
Tracked Since Feb 18, 2026