CVE-2025-68168

CVE-2025-68168

High · published December 16, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix uninitialized waitqueue in transaction manager

The transaction manager initialization in txInit() was not properly

initializing TxBlock[0].waitor waitqueue, causing a crash when

txEnd(0) is called on read-only filesystems.

When a filesystem is mounted read-only, txBegin() returns tid=0 to

indicate no transaction. However, txEnd(0) still gets called and

tries to access TxBlock[0].waitor via tid_to_tblock(0), but this

waitqueue was never initialized because the initialization loop

started at index 1 instead of 0.

This causes a 'non-static key' lockdep warning and system crash:

INFO: trying to register non-static key in txEnd

Fix by ensuring all transaction blocks including TxBlock[0] have

their waitqueues properly initialized during txInit().

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.3th percentile
Published
2025-12-16T19:15Z
References (8)
EPSS history
Timeline
  • 16 DEC 13:42Z
    jfs: fix uninitialized waitqueue in transaction manager
    cvelistv5