Security tracker / CVE-2025-68319

CVE-2025-68319

netconsole: Acquire su_mutex before navigating configs hierarchy

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in df03f830d099 ("net: netconsole: cache userdata formatted string
 carnil> in netconsole_target"). Vulnerable versions: 6.9.

Bugs

Status

Branch	Status
upstream	released (6.18-rc5) [d7d2fcf7ae31471b4e08b7e448b8fd0ec2e06a1b]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	released (6.17.8) [ff70aa7e8cf05745fdba7258952a8bedf33ea336]
6.12-upstream-stable	needed
6.6-upstream-stable	N/A "Vulnerable code not present"
6.1-upstream-stable	N/A "Vulnerable code not present"
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.17.8-1)
6.12-trixie-security	needed
6.1-bookworm-security	N/A "Vulnerable code not present"
5.10-bullseye-security	N/A "Vulnerable code not present"