cbcvebase.
CVE-2025-68814
published 2026-01-13

CVE-2025-68814: In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct…

PriorityP422high7.8
EPSS
0.18%
7.3th percentile
In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct filename using getname(). However, for the condition of the file being installed in the fixed file table as well as having O_CLOEXEC flag set, the function returns early. At that point, the request doesn't have REQ_F_NEED_CLEANUP flag set. Due to this, the memory for the newly allocated struct filename is not cleaned up, causing a memory leak. Fix this by setting the REQ_F_NEED_CLEANUP for the request just after the successful getname() call, so that when the request is torn down, the filename will be cleaned up, along with other resources needing cleanup.

Affected

48 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.162-1 (bookworm)linux 6.1.162-1 (bookworm)
debianlinux-6.1< linux 6.1.162-1 (bookworm)linux 6.1.162-1 (bookworm)
linuxlinux
linuxlinux>= b9445598d8c60a1379887b957024b71343965f74 < 2420ef01b2e836fbc05a0a8c73a1016504eb04582420ef01b2e836fbc05a0a8c73a1016504eb0458
linuxlinux>= b9445598d8c60a1379887b957024b71343965f74 < 8f44c4a550570cd5903625133f938c6b51310c9b8f44c4a550570cd5903625133f938c6b51310c9b
linuxlinux>= b9445598d8c60a1379887b957024b71343965f74 < 18b99fa603d0df5e1c898699c17d3b92ddc8074618b99fa603d0df5e1c898699c17d3b92ddc80746
linuxlinux>= b9445598d8c60a1379887b957024b71343965f74 < e232269d511566b1f80872256a48593acc1becf4e232269d511566b1f80872256a48593acc1becf4
linuxlinux>= b9445598d8c60a1379887b957024b71343965f74 < 7fbfb85b05bc960cc50e09d03e5e562131e48d457fbfb85b05bc960cc50e09d03e5e562131e48d45
linuxlinux>= b9445598d8c60a1379887b957024b71343965f74 < b14fad555302a2104948feaff70503b64c80ac01b14fad555302a2104948feaff70503b64c80ac01
linuxlinux_kernel>= 0 < 6.1.162-16.1.162-1
linuxlinux_kernel>= 0 < 6.12.69-16.12.69-1
linuxlinux_kernel>= 0 < 6.18.3-16.18.3-1
linuxlinux_kernel>= 0 < 5.15.0-173.1835.15.0-173.183
linuxlinux_kernel>= 5.15.0 < 5.15.1985.15.198
linuxlinux_kernel>= 5.16.0 < 6.1.1606.1.160
linuxlinux_kernel>= 6.13.0 < 6.18.36.18.3
linuxlinux_kernel>= 6.2.0 < 6.6.1206.6.120
linuxlinux_kernel>= 6.7.0 < 6.12.646.12.64
ubuntulinux-aws
ubuntulinux-aws-6.17
ubuntulinux-aws-fips
ubuntulinux-azure
ubuntulinux-azure-5.15
ubuntulinux-azure-6.17
ubuntulinux-azure-6.8

CVSS provenance

osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.