🛡️ CVE-2025-68320 — kernel

🟠 CVSS 7.5 — High ✅ No Known Exploit NVD
7.5
CVSS Score
0 Low4 Medium7 High9 Critical10

Description

lan966x: Fix sleeping in atomic context

In the Linux kernel, the following vulnerability has been resolved:

lan966x: Fix sleeping in atomic context

The following warning was seen when we try to connect using ssh to the device.

BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575

in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 104, name: dropbear

preempt_count: 1, expected: 0

INFO: lockdep is turned off.

CPU: 0 UID: 0 PID: 104 Comm: dropbear Tainted: G W 6.18.0-rc2-00399-g6f1ab1b109b9-dirty #530 NONE

Tainted: [W]=WARN

Hardware name: Generic DT based system

Call trace:

unwind_backtrace from show_stack+0x10/0x14

show_stack from dump_stack_lvl+0x7c/0xac

dump_stack_lvl from __might_resched+0x16c/0x2b0

__might_resched from __mutex_lock+0x64/0xd34

__mutex_lock from mutex_lock_nested+0x1c/0x24

mutex_lock_nested from lan966x_stats_get+0x5c/0x558

lan966x_stats_get from dev_get_stats+0x40/0x43c

dev_get_stats from dev_seq_printf_stats+0x3c/0x184

dev_seq_printf_stats from dev_seq_show+0x10/0x30

dev_seq_show from seq_read_iter+0x350/0x4ec

seq_read_iter from seq_read+0xfc/0x194

seq_read from proc_reg_read+0xac/0x100

proc_reg_read from vfs_read+0xb0/0x2b0

vfs_read from ksys_read+0x6c/0xec

ksys_read from ret_fast_syscall+0x0/0x1c

Exception stack(0xf0b11fa8 to 0xf0b11ff0)

1fa0: 00000001 00001000 00000008 be9048d8 00001000 00000001

1fc0: 00000001 00001000 00000008 00000003 be905920 0000001e 00000000 00000001

1fe0: 0005404c be9048c0 00018684 b6ec2cd8

It seems that we are using a mutex in a atomic context which is wrong.

Change the mutex with a spinlock.

How this vulnerability can be exploited

This issue can be reached over the network, attack complexity is low, an attacker needs no privileges on the target. No user interaction is required. The scope is unchanged, so the impact stays within the vulnerable component. Rated impact: confidentiality none, integrity none, availability high.

Affected software

CVE-2025-68320 is recorded against 2 packages.

  • kernel (from 6.13.0 up to 6.17.8)
  • unknown

Timeline and source

Published on 16 December 2025 and last revised on 6 August 2026. No public exploit is currently recorded for this entry. Record sourced from NVD.

References

git.kernel.org (Web)
git.kernel.org (Web)
git.kernel.org (Web)
git.kernel.org (Web)
github.com (Advisory)
nvd.nist.gov (Advisory)
git.kernel.org (Package)

CVE-2025-68320 on other distributions

Each distribution ships its own build and its own fixed version. Pick the one you run:

Details

Severity High
CVSS Score 7.5
CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE N/A
Public Exploit ✅ No
Source NVD
Published 2025-12-16
Updated 2026-08-12
Modified 2026-08-06
Fix URL N/A

Affected Packages

Software From version Fixed in
kernel 6.13.0 6.17.8
unknown — —

Similar Threats

Site Security Check

Is kernel part of your stack?

CVE-2025-68320 is rated CVSS 7.5 High. BotEraser scans your installation against known CVE records and tells you whether this vulnerability applies to the versions you actually run.

Scan My Site Free →

No credit card required  ·  Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.