CVE-2025-68317 — Improper Validation of Consistency within Input in Linux

CWE-1288 — Improper Validation of Consistency within Input17 documents8 sources
Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
LinuxLinux KernelDebian Linux+1 more
Timeline
PublishedDec 16
Latest updateFeb 24

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same context. There are some ambiguous syz reports, so let's check the assumption on notification completion.

Affected Packages6 packages

▶Linuxlinux/linux_kernel6.10.0 — 6.12.58+1
▶Debianlinux/linux_kernel< 6.12.63-1+1
▶Ubuntulinux/linux_kernel< 6.17.0-14.14
▶CVEListV5linux/linux6fe4220912d19152a26ce19713ab232f4263018d — aaafd17d3f4be2c15539359a5b4bfa00237f687f+3

🔴Vulnerability Details

8
OSV
linux-azure vulnerabilities↗2026-02-24
▶
OSV
linux-oem-6.17 vulnerabilities↗2026-02-17
▶
OSV
linux-aws, linux-oracle vulnerabilities↗2026-02-17
▶
OSV
linux-gcp vulnerabilities↗2026-02-12
▶
OSV
linux, linux-raspi, linux-realtime vulnerabilities↗2026-02-12
▶

📋Vendor Advisories

7
Ubuntu
Linux kernel (Azure) vulnerabilities↗2026-02-24
▶
Ubuntu
Linux kernel (OEM) vulnerabilities↗2026-02-17
▶
Ubuntu
Linux kernel (GCP) vulnerabilities↗2026-02-12
▶
Ubuntu
Linux kernel vulnerabilities↗2026-02-12
▶
Red Hat
kernel: Linux kernel: Denial of Service via improper handling of io_uring notification contexts↗2025-12-16
▶

🕵️Threat Intelligence

1
Wiz
CVE-2025-68317 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶