CVE-2025-68805Linux vulnerability

10 documents7 sources
Severity
6.4MEDIUM
No vector
EPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 13
Latest updateApr 17

Description

In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to list corruption and use-after-free issues. Remove the request from the queue's list for terminated non-committed requests.

Affected Packages7 packages

Linuxlinux/linux_kernel6.14.06.18.3
Debianlinux/linux_kernel< 6.18.3-1
CVEListV5linux/linuxc090c8abae4b6b77a1bee116aa6c385456ebef96a6d1f1ace16d0e777a85f84267160052d3499b6e+2
debiandebian/linux< linux 6.18.3-1 (forky)

🔴Vulnerability Details

3
OSV
CVE-2025-68805: In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a re2026-01-13
OSV
fuse: fix io-uring list corruption for terminated non-committed requests2026-01-13
GHSA
GHSA-264m-hxmc-hwjf: In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a2026-01-13

📋Vendor Advisories

5
Ubuntu
Linux kernel (GCP) vulnerabilities2026-04-17
Ubuntu
Linux kernel (Real-time) vulnerabilities2026-04-17
Ubuntu
Linux kernel vulnerabilities2026-04-16
Red Hat
kernel: fuse: fix io-uring list corruption for terminated non-committed requests2026-01-13
Debian
CVE-2025-68805: linux - In the Linux kernel, the following vulnerability has been resolved: fuse: fix i...2025

🕵️Threat Intelligence

1
Wiz
CVE-2025-68805 Impact, Exploitability, and Mitigation Steps | Wiz