Linux Kernel nilfs2 Vulnerability in sc_timer Management

CVE-2025-68240

What is CVE-2025-68240?

The Linux kernel's nilfs2 component has a vulnerability related to the improper management of the sc_timer. Specifically, when the kthread_stop function fails to stop the sc_task properly, it leads to an unaddressed active sc_timer. As a result, when freeing the sci, the sc_timer is not closed, causing potential disruptions in system operations. The resolution employs timer_shutdown_sync to ensure that the sc_timer is correctly shut down, enhancing stability and security in system processes. This vulnerability underscores the importance of diligent timer management within kernel operations to prevent resource-related issues.

References