CVE-2025-68329

CVE-2025-68329

published December 22, 2025

CVSS
—
EPSS
0%
Percentile
7.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs

When a VMA is split (e.g., by partial munmap or MAP_FIXED), the kernel

calls vm_ops->close on each portion. For trace buffer mappings, this

results in ring_buffer_unmap() being called multiple times while

ring_buffer_map() was only called once.

This causes ring_buffer_unmap() to return -ENODEV on subsequent calls

because user_mapped is already 0, triggering a WARN_ON.

Trace buffer mappings cannot support partial mappings because the ring

buffer structure requires the complete buffer including the meta page.

Fix this by adding a may_split callback that returns -EINVAL to prevent

VMA splits entirely.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00184 · 7.6th percentile
Published
2025-12-22T22:16Z
References (3)
EPSS history
Timeline
  • 22 DEC 16:12Z
    tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
    cvelistv5