CVE Explorer

CVE-2025-68214

In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There is a race condition between timer_shutdown_sync() and timer expiration that can lead to hitting a WARN_ON in expire_timers(). The issue occurs when timer_shutdown_sync() clears the timer function to NULL while the timer is still running on another CPU. The race scenario looks like this: CPU0 CPU1 <SOFTIRQ> lock_timer_base() expire_timers

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:3ba5a971eea98e738f452e00fdb88b58db2a48f4d77299fd2be407360b8565f3

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/time/timer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.159","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.118","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.60","versionType":"semver"},{"lessThanOrEqua…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/time/timer.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"ba43ac025c4318241f8edf94f31d2eebab86991b","status":"affected","version":"debbcf812d735003c96c5e5968a3cfa4e1fbd1af","versionType":"git"},{"lessThan":"1a975716cc8977f461e45e28e3e5977d46ad7a6a","status":"affected","version":"334c33aa487be406a149c8b87c38c8399d2dba8d","versionType":"git"},{"lessThan":"6665fbd7730b26d770c232b20d1b907e6a67a914","status":"affected","version":"0cc04e80458a822300b93f82ed…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/affected/0

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/176725f4848376530a0f0da9023f956afcc33585"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/1a975716cc8977f461e45e28e3e5977d46ad7a6a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/20739af07383e6eb1ec59dcd70b72ebfa9ac362c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/6665fbd7730b26d770c232b20d1b907e6a67a914"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/a01efa7a780c42ac5170a949bd95c9786ffcc60a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/ba43ac025c4318241f8edf94f31d2eebab86991b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:c6c5ba2f917effcb26200b9ce104e9caaa17dde7ab26b5712d0b093d4b1e2d25 · sha256:5e4f4d466623601c… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer