cve 2025 68357

CVE-2025-68357 is a Linux kernel vulnerability in the iomap layer that affects asynchronous read error-completion handling. The bug involves a race condition where deferred read error completions could run without a properly allocated workqueue, potentially causing system crashes, incorrect error attribution, or availability issues. The vulnerability was introduced after a behavioral change that moved error completions to a dedicated workqueue (s_dio_done_wq), but this workqueue was not always allocated for async read paths. The issue has been fixed in upstream stable trees, and operators need to apply the corresponding vendor-specific patches. This tag covers discussions about the technical details, impact, and remediation of CVE-2025-68357.