CVE-2025-68373

A flaw was found in the Linux kernel's MD RAID subsystem. A race condition between the rdev remove path and md stop path can cause del_gendisk() to be called twice on the same disk. This leads to a use-after-free when the second call attempts to unregister an already-freed backing device info structure, causing a kernel crash.

This vulnerability affects systems using MD software RAID arrays. The race condition requires concurrent RAID device removal and array stop operations, which is an uncommon scenario during normal operation. The impact is limited to denial of service through a kernel crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.