CVE-2025-68762
In the Linux kernel, the following vulnerability has been resolved: net: netpoll: initialize work queue before error checks Prevent a kernel warning when netconsole setup fails on devices with IFF_DISABLE_NETPOLL flag. The warning (at kernel/workqueue.c:4242 in __flush_work) occurs because the cleanup path tries to cancel an uninitialized work queue. When __netpoll_setup() encounters a device with IFF_DISABLE_NETPOLL, it fails early and calls skb_pool_flush() for cleanup. This function calls cancel_work_sync(&np->refill_wq), but refill_wq hasn't been initialized yet, triggering the warning. Move INIT_WORK() to the beginning of __netpoll_setup(), ensuring the work queue is properly initialized before any potential failure points. This allows the cleanup path to safely cancel the work queue regardless of where the setup fails.
Affected versions
Linux kernel versions
6.15
and later are affected. Fixed in
6.17.13,
6.18.2,
6.19
and their respective stable series.
References
The following references provide additional information about CVE-2025-68762 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/760bc6ceda8e2c273c0e2018ad2595967c3dd308
-
PatchKernel patch commithttps://git.kernel.org/stable/c/a90d0dc38a10347078cca60e7495ad0648838f18
-
PatchKernel patch commithttps://git.kernel.org/stable/c/e5235eb6cfe02a51256013a78f7b28779a7740d5
Frequently asked questions
-
What is CVE-2025-68762?
CVE-2025-68762 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.15 onward and has been patched in 6.17.13, 6.18.2 and 6.19. CVE-2025-68762 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2025-68762?
Yes — CVE-2025-68762 has been patched. Fixed versions include 6.17.13, 6.18.2 and 6.19. If you are running Linux kernel 6.15 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2025-68762 actively exploited?
No — CVE-2025-68762 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.