CVE-2025-68169
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/12/2025
Last modified:
18/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
netpoll: Fix deadlock in memory allocation under spinlock<br />
<br />
Fix a AA deadlock in refill_skbs() where memory allocation while holding<br />
skb_pool->lock can trigger a recursive lock acquisition attempt.<br />
<br />
The deadlock scenario occurs when the system is under severe memory<br />
pressure:<br />
<br />
1. refill_skbs() acquires skb_pool->lock (spinlock)<br />
2. alloc_skb() is called while holding the lock<br />
3. Memory allocator fails and calls slab_out_of_memory()<br />
4. This triggers printk() for the OOM warning<br />
5. The console output path calls netpoll_send_udp()<br />
6. netpoll_send_udp() attempts to acquire the same skb_pool->lock<br />
7. Deadlock: the lock is already held by the same CPU<br />
<br />
Call stack:<br />
refill_skbs()<br />
spin_lock_irqsave(&skb_pool->lock) lock)



