CVE-2025-68250

CVE-2025-68250

High · published December 16, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
22.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hung_task: fix warnings caused by unaligned lock pointers

The blocker tracking mechanism assumes that lock pointers are at least

4-byte aligned to use their lower bits for type encoding.

However, as reported by Eero Tamminen, some architectures like m68k

only guarantee 2-byte alignment of 32-bit values. This breaks the

assumption and causes two related WARN_ON_ONCE checks to trigger.

To fix this, the runtime checks are adjusted to silently ignore any lock

that is not 4-byte aligned, effectively disabling the feature in such

cases and avoiding the related warnings.

Thanks to Geert Uytterhoeven for bisecting!

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00307 · 22.4th percentile
Published
2025-12-16T20:15Z
References (2)
EPSS history
Timeline
  • 16 DEC 14:32Z
    hung_task: fix warnings caused by unaligned lock pointers
    cvelistv5