CVE-2025-68366: nbd: defer config unlock in nbd_genl_connect

Published Dec 24, 2025
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

nbd: defer config unlock in nbdgenlconnect

There is one use-after-free warning when running NBDCMDCONNECT and NBDCLEARSOCK:

nbdgenlconnect nbdallocandinitconfig // configrefs=1 nbdstartdevice // configrefs=2 set NBDRTHASCONFIGREF open nbd // configrefs=3 recvwork done // configrefs=2 NBDCLEARSOCK // configrefs=1 close nbd // configrefs=0 refcountinc -> uaf

------------[ cut here ]------------ refcountt: addition on 0; use-after-free. WARNING: CPU: 24 PID: 1014 at lib/refcount.c:25 refcountwarnsaturate+0x12e/0x290 nbdgenlconnect+0x16d0/0x1ab0 genlfamilyrcvmsgdoit+0x1f3/0x310 genlrcvmsg+0x44a/0x790

The issue can be easily reproduced by adding a small delay before refcountinc(&nbd->configrefs) in nbdgenlconnect():

mutexunlock(&nbd->configlock); if (!ret) { setbit(NBDRTHASCONFIGREF, &config->runtimeflags); + printk("before sleep\n"); + mdelay(5 1000); + printk("after sleep\n"); refcountinc(&nbd->configrefs); nbdconnectreply(info, nbd->index); }

Affected Software

2 affected components
Linux Linux kernel
Microsoft azl3 kernel 6.6.117.1-1

Event History

Dec 24, 2025
CVE Published
via MITRE·10:32 AM
Data Sourced
via MITRE·10:32 AM
Description
Data Sourced
via Red Hat·11:03 AM
DescriptionSeverityAffected Software
Data Sourced
via NVD·11:16 AM
Description
Dec 25, 2025
Data Sourced
via Microsoft·01:03 AM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2025-68366?

CVE-2025-68366 has been classified as a medium severity vulnerability in the Linux kernel.

2

How do I fix CVE-2025-68366?

To resolve CVE-2025-68366, you should update to the latest version of the Linux kernel that includes the patch for this vulnerability.

3

What are the potential impacts of CVE-2025-68366?

The potential impacts of CVE-2025-68366 include possible denial of service or system instability due to a use-after-free condition.

4

Which versions of the Linux kernel are affected by CVE-2025-68366?

CVE-2025-68366 affects various versions of the Linux kernel prior to the patch release addressing the vulnerability.

5

Is CVE-2025-68366 exploitable?

Yes, CVE-2025-68366 is considered exploitable under certain conditions, which could lead to a denial of service.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203