CVE-2025-68356

CVE-2025-68356 addresses a vulnerability in the Linux kernel's gfs2 filesystem, specifically preventing recursive memory reclaim that could lead to deadlocks or stack memory exhaustion. This issue arises when inode address space allocations, particularly during operations like gfs2_unstuff_dinode(), trigger memory reclaim that then recurses back into the filesystem. The fix involves modifying the gfp_mask for inode address spaces to exclude the __GFP_FS flag, thereby preventing this problematic recursion. While no CVSS score is provided, the potential for system deadlocks suggests a significant impact on availability. The attack vector appears to be internal to the kernel's memory management, making direct exploitation complex and likely requiring specific filesystem operations. There is no indication of active exploitation, nor is exploit code publicly available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one mention and one article indicating limited public attention. The vulnerability is not listed in the CISA KEV catalog and is currently inactive on the Hot List, suggesting a low immediate threat level.