CVE-2025-68218

CVE-2025-68218

High · published December 16, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
43.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nvme-multipath: fix lockdep WARN due to partition scan work

Blktests test cases nvme/014, 057 and 058 fail occasionally due to a

lockdep WARN. As reported in the Closes tag URL, the WARN indicates that

a deadlock can happen due to the dependency among disk->open_mutex,

kblockd workqueue completion and partition_scan_work completion.

To avoid the lockdep WARN and the potential deadlock, cut the dependency

by running the partition_scan_work not by kblockd workqueue but by

nvme_wq.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00528 · 43.8th percentile
Published
2025-12-16T19:15Z
References (5)
EPSS history
Timeline
  • 16 DEC 13:57Z
    nvme-multipath: fix lockdep WARN due to partition scan work
    cvelistv5