CVE-2025-68262 — Linux vulnerability
19 documents7 sources
Severity
7.2HIGHOSV
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: zstd - fix double-free in per-CPU stream cleanup
The crypto/zstd module has a double-free bug that occurs when multiple
tfms are allocated and freed.
The issue happens because zstd_streams (per-CPU contexts) are freed in
zstd_exit() during every tfm destruction, rather than being managed at
the module level. When multiple tfms exist, each tfm exit attempts to
free the same shared per-CPU streams, resulting in a double…
Affected Packages5 packages
▶CVEListV5linux/linuxf5ad93ffb54119a8dc5e18f070624d4ead586969 — dc0f4509b0ed5d82bef78e058db0ac4df04d0695+3