CVE-2025-68359 — Release of Invalid Pointer or Reference in Linux
Severity
7.2HIGHOSV
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix double free of qgroup record after failure to add delayed ref head
In the previous code it was possible to incur into a double kfree()
scenario when calling add_delayed_ref_head(). This could happen if the
record was reported to already exist in the
btrfs_qgroup_trace_extent_nolock() call, but then there was an error
later on add_delayed_ref_head(). In this case, since
add_delayed_ref_head() returned an error, the c…
Affected Packages5 packages
▶CVEListV5linux/linux6ef8fbce010421bf742b12b8f8f2b2d2ff154845 — 7617680769e3119dfb3b43a2b7c287ce2242211c+3