In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partition scan work Blktests test cases… (CVE-2025-68218)
A vulnerability in the Linux kernel's nvme-multipath component could cause a deadlock due to improper lock dependency handling during partition scan work. This issue was identified through intermittent lockdep warnings in specific Blktests test cases. The problem arises from a dependency cycle involving disk->open_mutex, kblockd workqueue completion, and partition_scan_work completion. The fix involves changing the execution context of partition_scan_work from the kblockd workqueue to the nvme_wq workqueue, thereby breaking the dependency cycle and preventing potential deadlocks.
AI Analysis
Technical Summary
CVE-2025-68218 addresses a deadlock vulnerability in the Linux kernel's nvme-multipath subsystem. The vulnerability manifests as a lockdep warning triggered by a dependency cycle among disk->open_mutex, kblockd workqueue completion, and partition_scan_work completion. This cycle can lead to a deadlock condition. The resolution involves modifying the partition_scan_work to run on the nvme_wq workqueue instead of the kblockd workqueue, effectively removing the problematic dependency and preventing the deadlock.
Potential Impact
The vulnerability can cause a denial of service by deadlocking kernel operations related to NVMe multipath partition scanning. There is no impact on confidentiality or integrity, but availability is affected due to the potential for system hangs or stalls caused by the deadlock.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the workqueue used for partition_scan_work. Users should apply the official kernel updates that include this fix. Since this is a kernel-level issue, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly stated here; users should consult the Linux kernel vendor advisory or distribution updates for the official patched versions.
In the Linux kernel, the following vulnerability has been resolved: nvme-multipath: fix lockdep WARN due to partition scan work Blktests test cases… (CVE-2025-68218)
Description
A vulnerability in the Linux kernel's nvme-multipath component could cause a deadlock due to improper lock dependency handling during partition scan work. This issue was identified through intermittent lockdep warnings in specific Blktests test cases. The problem arises from a dependency cycle involving disk->open_mutex, kblockd workqueue completion, and partition_scan_work completion. The fix involves changing the execution context of partition_scan_work from the kblockd workqueue to the nvme_wq workqueue, thereby breaking the dependency cycle and preventing potential deadlocks.
CVSS v3.1
Score 7.5high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-68218 addresses a deadlock vulnerability in the Linux kernel's nvme-multipath subsystem. The vulnerability manifests as a lockdep warning triggered by a dependency cycle among disk->open_mutex, kblockd workqueue completion, and partition_scan_work completion. This cycle can lead to a deadlock condition. The resolution involves modifying the partition_scan_work to run on the nvme_wq workqueue instead of the kblockd workqueue, effectively removing the problematic dependency and preventing the deadlock.
Potential Impact
The vulnerability can cause a denial of service by deadlocking kernel operations related to NVMe multipath partition scanning. There is no impact on confidentiality or integrity, but availability is affected due to the potential for system hangs or stalls caused by the deadlock.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this issue by changing the workqueue used for partition_scan_work. Users should apply the official kernel updates that include this fix. Since this is a kernel-level issue, updating to a patched kernel version is the recommended remediation. Patch status is not explicitly stated here; users should consult the Linux kernel vendor advisory or distribution updates for the official patched versions.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-7fq2-6xq4-hq67
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2025-68218"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a6b72d39c2644c7f847863b
Added to database: 07/30/2026, 15:50:43 UTC
Last enriched: 07/30/2026, 18:23:46 UTC
Last updated: 09/10/2026, 19:38:44 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.