CVE-2025-68823

Source
https://cve.org/CVERecord?id=CVE-2025-68823
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68823.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68823
Downstream
Published
2026-01-13T15:29:25.392Z
Modified
2026-04-02T13:03:51.784821Z
Summary
ublk: fix deadlock when reading partition table
Details

In the Linux kernel, the following vulnerability has been resolved:

ublk: fix deadlock when reading partition table

When one process(such as udev) opens ublk block device (e.g., to read the partition table via bdev_open()), a deadlock[1] can occur:

  1. bdevopen() grabs disk->openmutex
  2. The process issues read I/O to ublk backend to read partition table
  3. In _ublkcompleterq(), blkupdaterequest() or blkmqendrequest() runs bio->biendio() callbacks
  4. If this triggers fput() on file descriptor of ublk block device, the work may be deferred to current task's task work (see fput() implementation)
  5. This eventually calls blkdev_release() from the same context
  6. blkdevrelease() tries to grab disk->openmutex again
  7. Deadlock: same task waiting for a mutex it already holds

The fix is to run blkupdaterequest() and blkmqendrequest() with bottom halves disabled. This forces blkdevrelease() to run in kernel work-queue context instead of current task work context, and allows ublk server to make forward progress, and avoids the deadlock.

[axboe: rewrite comment in ublk]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68823.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
71f28f3136aff5890cd56de78abc673f8393cad9
Fixed
64c0b7e2293757e8320f13434cd809f1c9257a62
Fixed
9bcc47343ee0ef346aa7b2b460c8ff56bd882fe7
Fixed
0460e09a614291f06c008443f47393c37b7358e7
Fixed
c258f5c4502c9667bccf5d76fa731ab9c96687c1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68823.json"