PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2025-68214

CVE-2025-68214

kernel: Linux kernel: Denial of Service due to NULL function pointer race in timer shutdown

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 16, 2025

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel. A race condition exists in the timer_shutdown_sync() function, where a timer's function pointer can be set to NULL while the timer is still active on another processor. This can be exploited by a local attacker to trigger a kernel warning, potentially leading to system instability or a denial of service.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-476 · NULL Pointer Dereference