CVE-2025-68374

A flaw was found in the Linux kernel's MD RAID subsystem. The RCU protection in md_wakeup_thread() is ineffective because the thread pointer is acquired before the rcu_read_lock() is taken. This ordering error means the pointer can be freed while still in use, leading to a potential use-after-free condition.

This vulnerability affects systems using MD software RAID. The RCU protection bug creates a window where the thread pointer could be freed during use. Exploiting this requires specific timing during MD thread operations. The impact is limited to denial of service through potential memory corruption or crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.