CVE-2025-68253

CVE-2025-68253

published December 16, 2025

CVSS
—
EPSS
0%
Percentile
6.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

mm: don't spin in add_stack_record when gfp flags don't allow

syzbot was able to find the following path:

add_stack_record_to_list mm/page_owner.c:182 [inline]

inc_stack_record_count mm/page_owner.c:214 [inline]

__set_page_owner+0x2c3/0x4a0 mm/page_owner.c:333

set_page_owner include/linux/page_owner.h:32 [inline]

post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851

prep_new_page mm/page_alloc.c:1859 [inline]

get_page_from_freelist+0x21e4/0x22c0 mm/page_alloc.c:3858

alloc_pages_nolock_noprof+0x94/0x120 mm/page_alloc.c:7554

Don't spin in add_stack_record_to_list() when it is called

from *_nolock() context.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.3th percentile
Published
2025-12-16T20:15Z
References (2)
EPSS history
Timeline
  • 16 DEC 14:32Z
    mm: don't spin in add_stack_record when gfp flags don't allow
    cvelistv5