CVE-2025-68348

Linux Kernel 6.11-6.12.62, 6.13-6.17.12, 6.18.0-6.18.1 - Memory Leak in __blkdev_issue_zero_pages

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in __blkdev_issue_zero_pages Move the fatal signal check before bio_alloc() to prevent a memory leak when BLKDEV_ZERO_KILLABLE is set and a fatal signal is pending. Previously, the bio was allocated before checking for a fatal signal. If a signal was pending, the code would break out of the loop without freeing or chaining the just-allocated bio, causing a memory leak. This matches the pattern already used in __blkdev_issue_write_zeroes() where the signal check precedes the allocation.

Scores

EPSS 0.0002
EPSS Percentile 7.2%

Details

Status published
Products (13)
linux/Kernel 6.11.0 - 6.12.63linux
linux/Kernel 6.13.0 - 6.17.13linux
linux/Kernel 6.18.0 - 6.18.2linux
Linux/Linux < 6.11
Linux/Linux 6.11
Linux/Linux 6.12.63 - 6.12.*
Linux/Linux 6.17.13 - 6.17.*
Linux/Linux 6.18.2 - 6.18.*
Linux/Linux 6.19
Linux/Linux bf86bcdb40123ee99669ee91b67e023669433a1a - 453e4b0c84d0db1454ff0adf655d91179e6fca3a
... and 3 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026