CVE-2025-68212
High
Description
In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmount_string() In statmount_string(), most flags assign an output offset pointer (offp) which is later updated with the string offset. However, the STATMOUNT_MNT_UIDMAP and STATMOUNT_MNT_GIDMAP cases directly set the struct fields instead of using offp. This leaves offp uninitialized, leading to a possible uninitialized dereference when *offp is updated. Fix it by assigning offp for UIDMAP and GIDMAP as well, keeping the code path consistent.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linuxacfde9400e611c8d2668f1c70053c4a1d6ecfc36, 0778ac7df5137d5041783fadfc201f8fd55a1d9b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 37c4a9590e1efcae7749682239fc22a330d2d325 ≤ v < acfde9400e611c8d2668f1c70053c4a1d6ecfc36, 37c4a9590e1efcae7749682239fc22a330d2d325 ≤ v < 0778ac7df5137d5041783fadfc201f8fd55a1d9b, 6.15 | acfde9400e611c8d2668f1c70053c4a1d6ecfc36, 0778ac7df5137d5041783fadfc201f8fd55a1d9b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.