{"id":"CVE-2025-68368","revision":"897b56857ebd45a98d8a51fe615f8e51","records":[{"revision":"897b56857ebd45a98d8a51fe615f8e51","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-68368","aliases":[],"title":"md: init bioset in mddev_init","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nmd: init bioset in mddev_init\n\nIO operations may be needed before md_run(), such as updating metadata\nafter writing sysfs. Without bioset, this triggers a NULL pointer\ndereference as below:\n\n BUG: kernel NULL pointer dereference, address: 0000000000000020\n Call Trace:\n  md_update_sb+0x658/0xe00\n  new_level_store+0xc5/0x120\n  md_attr_store+0xc9/0x1e0\n  sysfs_kf_write+0x6f/0xa0\n  kernfs_fop_write_iter+0x141/0x2a0\n  vfs_write+0x1fc/0x5a0\n  ksys_write+0x79/0x180\n  __x64_sys_write+0x1d/0x30\n  x64_sys_call+0x2818/0x2880\n  do_syscall_64+0xa9/0x580\n  entry_SYSCALL_64_after_hwframe+0x4b/0x53\n\nReproducer\n```\n  mdadm -CR /dev/md0 -l1 -n2 /dev/sd[cd]\n  echo inactive > /sys/block/md0/md/array_state\n  echo 10 > /sys/block/md0/md/new_level\n```\n\nmddev_init() can only be called once per mddev, no need to test if bioset\nhas been initialized anymore.","state":0,"publishedAt":"2025-12-24T10:32:54.765+00:00","modifiedAt":"2026-10-21T12:38:19.281+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/md/md.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d981ed8419303ed12351eea8541ad6cb76455fe3\",\n                            \"lessThan\": \"903fb4851ee8d291372d285f616c398a9c4cbbec\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d981ed8419303ed12351eea8541ad6cb76455fe3\",\n                            \"lessThan\": \"9d37fe37dfa0833a8768740f0575e0ffd793cb4a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d981ed8419303ed12351eea8541ad6cb76455fe3\",\n                            \"lessThan\": \"381a3ce1c0ffed647c9b913e142b099c7e9d5afc\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/md/md.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.12\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.12\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.114\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.2\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/903fb4851ee8d291372d285f616c398a9c4cbbec","https://git.kernel.org/stable/c/9d37fe37dfa0833a8768740f0575e0ffd793cb4a","https://git.kernel.org/stable/c/381a3ce1c0ffed647c9b913e142b099c7e9d5afc"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-68368","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-68368","identifiers":["CVE-2025-68368"]},"retained":false,"historicalAffected":[]}],"coverage":[]}