CVE-2025-68791: fuse: missing copy_finish in fuse-over-io-uring argument copies
In the Linux kernel, the following vulnerability has been resolved:
fuse: missing copyfinish in fuse-over-io-uring argument copies
Fix a possible reference count leak of payload pages during fuse argument copies.
[Joanne: simplified error cleanup]
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68791?
The severity of CVE-2025-68791 is categorized as moderate due to the potential for reference count leaks.
How do I fix CVE-2025-68791?
To fix CVE-2025-68791, update to the patched version of the Linux kernel that addresses this vulnerability.
What software is affected by CVE-2025-68791?
CVE-2025-68791 affects the Linux Kernel when using the fuse-over-io-uring feature.
What are the risks associated with CVE-2025-68791?
The risks associated with CVE-2025-68791 include potential reference count leaks that could lead to memory management issues.
When was CVE-2025-68791 disclosed?
CVE-2025-68791 was disclosed as part of ongoing vulnerability management in the Linux kernel.