CVE-2025-68212
- Source
- https://cve.org/CVERecord?id=CVE-2025-68212
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68212.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-68212
- Downstream
- Published
- 2025-12-16T13:57:08.327Z
- Modified
- 2026-01-17T19:51:44.362678Z
- Summary
- fs: Fix uninitialized 'offp' in statmount_string()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
fs: Fix uninitialized 'offp' in statmount_string()
In statmountstring(), most flags assign an output offset pointer (offp) which is later updated with the string offset. However, the STATMOUNTMNTUIDMAP and STATMOUNTMNT_GIDMAP cases directly set the struct fields instead of using offp. This leaves offp uninitialized, leading to a possible uninitialized dereference when *offp is updated.
Fix it by assigning offp for UIDMAP and GIDMAP as well, keeping the code path consistent.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68212.json" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/0778ac7df5137d5041783fadfc201f8fd55a1d9b
- https://git.kernel.org/stable/c/acfde9400e611c8d2668f1c70053c4a1d6ecfc36
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68212.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-68212
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced37c4a9590e1efcae7749682239fc22a330d2d325Fixedacfde9400e611c8d2668f1c70053c4a1d6ecfc36Fixed0778ac7df5137d5041783fadfc201f8fd55a1d9b
Affected versions
v6.*
v6.14
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.16
v6.16-rc1
v6.16-rc2
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.17
v6.17-rc1
v6.17-rc2
v6.17-rc3
v6.17-rc4
v6.17-rc5
v6.17-rc6
v6.17-rc7
v6.17.1
v6.17.2
v6.17.3
v6.17.4
v6.17.5
v6.17.6
v6.17.7
v6.17.8
v6.17.9
v6.18-rc1