CVE-2025-68329: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs
Vulnerability summary
CVE-2025-68329 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 8% of scored vulnerabilities.
No CVSS vector published; no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 10 · Related 10Timeline
- 22-12-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: tracing: Fix WARN_ON in tracing_buffers_mmap_close for split VMAs When a VMA is split (e.g., by partial munmap or MAP_FIXED), the kernel calls vm_ops->close on each portion. For trace buffer mappings, this results in ring_buffer_unmap() being called multiple times while ring_buffer_map() was only called once. This causes ring_buffer_unmap() to return -ENODEV on subsequent calls because user_mapped is already 0, triggering a WARN_ON. Trace buffer mappings cannot support partial mappings because the ring buffer structure requires the complete buffer including the meta page. Fix this by adding a may_split callback that returns -EINVAL to prevent VMA splits entirely.
CVSS metrics
Risk metrics not yet published.
EPSS trend
Probability
0.18%
Chance of exploitation in the next 30 days
Percentile
8%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.18% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: not stated in public data.
Ubuntu107 products
- linux< 6.17.0-19.19
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 6.17.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.12.63-1 | < 6.17.11-1
Linux1 product
- linux≥ cf9f0f7c4c5bb45e7bb270e48bab6f7837825a64, < 922fdd0b755a84f9933b3ca195f60092b6bb88ee | ≥ cf9f0f7c4c5bb45e7bb270e48bab6f7837825a64, < 45053c12c45f0fb8ef6ab95118dd928d2fec0255 | ≥ cf9f0f7c4c5bb45e7bb270e48bab6f7837825a64, < b042fdf18e89a347177a49e795d8e5184778b5b6 | 6.10
3 vendors · 109 products
