CVE-2025-68821

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to the FUSE (Filesystem in Userspace) implementation. A deadlock situation can occur when readahead requests interact with inode eviction and reclaim processes. Specifically, if a FUSE server does not implement the 'open' operation, the system may skip allocating resources needed for release operations. This can lead to a deadlock when reclaim attempts to evict an inode while inflight readahead requests are active, as the reclaim process can block indefinitely waiting for a lock held by the readahead request. The issue arises because the inode reference is not properly managed during readahead, potentially allowing the inode to be evicted while readahead operations are still in progress. The commit e26ee4efbc79 aimed to address a related issue but inadvertently introduced this deadlock scenario.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.