CVE-2025-68791 — Improper Update of Reference Count in Linux
Severity
6.4MEDIUM
No vectorEPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
fuse: missing copy_finish in fuse-over-io-uring argument copies
Fix a possible reference count leak of payload pages during
fuse argument copies.
[Joanne: simplified error cleanup]
Affected Packages7 packages
▶CVEListV5linux/linuxc090c8abae4b6b77a1bee116aa6c385456ebef96 — b79938863f436960eff209130f025c4bd3026bf8+2
🔴Vulnerability Details
3GHSA▶
GHSA-7jvc-cm4g-4hr3: In the Linux kernel, the following vulnerability has been resolved:
fuse: missing copy_finish in fuse-over-io-uring argument copies
Fix a possible r↗2026-01-13
OSV▶
CVE-2025-68791: In the Linux kernel, the following vulnerability has been resolved: fuse: missing copy_finish in fuse-over-io-uring argument copies Fix a possible ref↗2026-01-13
📋Vendor Advisories
5Debian▶
CVE-2025-68791: linux - In the Linux kernel, the following vulnerability has been resolved: fuse: missi...↗2025