CVE-2025-68178

CVE-2025-68178 describes a deadlock vulnerability in the Linux kernel's blk-cgroup component, specifically when configuring block I/O policies. This flaw can lead to system instability or unresponsiveness. The vulnerability arises from an unsafe locking scenario involving q->sysfs_lock, q->rq_qos_mutex, and q->q_usage_counter, where locks are acquired in a circular dependency. While no CVSS score is available, the potential for system deadlock suggests a significant impact on availability. There is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has garnered some community discussion and media coverage.