CVE-2025-68809 — Linux vulnerability
14 documents7 sources
Severity
6.4MEDIUM
No vectorEPSS
0.0%
top 92.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 13
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: vfs: fix race on m_flags in vfs_cache
ksmbd maintains delete-on-close and pending-delete state in
ksmbd_inode->m_flags. In vfs_cache.c this field is accessed under
inconsistent locking: some paths read and modify m_flags under
ci->m_lock while others do so without taking the lock at all.
Examples:
- ksmbd_query_inode_status() and __ksmbd_inode_close() use
ci->m_lock when checking or updating m_flags.
- ksmbd_inode_pen…
Affected Packages14 packages
▶CVEListV5linux/linuxf44158485826c076335d6860d35872271a83791d — 5adad9727a815c26013b0d41cfee92ffa7d4037c+4
🔴Vulnerability Details
3GHSA▶
GHSA-ffpf-rf35-3fhq: In the Linux kernel, the following vulnerability has been resolved:
ksmbd: vfs: fix race on m_flags in vfs_cache
ksmbd maintains delete-on-close and↗2026-01-13
OSV▶
CVE-2025-68809: In the Linux kernel, the following vulnerability has been resolved: ksmbd: vfs: fix race on m_flags in vfs_cache ksmbd maintains delete-on-close and p↗2026-01-13