CVE-2025-68265 — Expired Pointer Dereference in Linux

CWE-825 — Expired Pointer Dereference24 documents8 sources
Severity
7.2HIGHOSV
No vector
EPSS
0.0%
top 89.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
13
LinuxLinux KernelDebian Linux+10 more
Timeline
PublishedDec 16
Latest updateApr 17

Description

In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin request_queue lifetime The namespaces can access the controller's admin request_queue, and stale references on the namespaces may exist after tearing down the controller. Ensure the admin request_queue is active by moving the controller's 'put' to after all controller references have been released to ensure no one is can access the request_queue. This fixes a reported use-after-free bug: BUG: KASAN: slab-use-a…

Affected Packages15 packages

▶Linuxlinux/linux_kernel6.1.0 — 6.1.167+3
▶Debianlinux/linux_kernel< 6.12.63-1+1
▶Ubuntulinux/linux_kernel< 6.17.0-19.19

🔴Vulnerability Details

9
OSV
linux-oem-6.17 vulnerabilities↗2026-04-06
▶
OSV
linux-raspi vulnerabilities↗2026-04-01
▶
OSV
linux-azure, linux-azure-6.17 vulnerabilities↗2026-03-25
▶
OSV
linux-realtime-6.17 vulnerabilities↗2026-03-23
▶
OSV
linux-gcp-6.17, linux-realtime vulnerabilities↗2026-03-17
▶

📋Vendor Advisories

13
Ubuntu
Linux kernel (FIPS) vulnerabilities↗2026-04-17
▶
Ubuntu
Linux kernel (Real-time) vulnerabilities↗2026-04-17
▶
Ubuntu
Linux kernel (NVIDIA) vulnerabilities↗2026-04-17
▶
Ubuntu
Linux kernel vulnerabilities↗2026-04-16
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2026-04-06
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-68265 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶
CVE-2025-68265 — Expired Pointer Dereference in Linux | cvebase