CVE-2025-68377

Overview

In the Linux kernel, the ns_list_node for initial namespaces was not properly initialized. The fix ensures that the list is always initialized for initial namespaces, preventing potential list corruption or use-after-free conditions when the namespace is accessed or freed [1].

Root

Cause The vulnerability stems from omitting the initialization of ns_list_node in the initial namespace setup. Without proper initialization, kernel operations that rely on list pointers (e.g., iteration, removal) may operate on uninitialized or stale data, leading to memory safety issues [1].

Impact and

Exploitation An attacker who can trigger namespace operations on the initial namespace—such as a local user with namespace creation privileges—may exploit this flaw to cause list corruption or a use-after-free. This could lead to a denial of service (system crash) or, in some cases, potential escalation of privileges, though the commit message does not specify exploitability [1].

Mitigation

The fix was committed to the Linux kernel stable tree. Users should apply the patch from the referenced commit to ensure ns_list_node is always initialized. No workarounds have been publicly documented [1].