CVE-2025-68805: fuse: fix io-uring list corruption for terminated non-committed requests
In the Linux kernel, the following vulnerability has been resolved:
fuse: fix io-uring list corruption for terminated non-committed requests
When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to list corruption and use-after-free issues.
Remove the request from the queue's list for terminated non-committed requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68805?
CVE-2025-68805 has been classified as a medium severity vulnerability due to the potential for list corruption.
How do I fix CVE-2025-68805?
To fix CVE-2025-68805, ensure you are running the latest patched version of the Linux kernel.
What systems are affected by CVE-2025-68805?
CVE-2025-68805 affects all versions of the Linux kernel that utilize io-uring for request handling.
What are the potential consequences of CVE-2025-68805?
The potential consequences of CVE-2025-68805 include system instability and data corruption due to list management issues.
Is CVE-2025-68805 being actively exploited?
As of the latest information, there are no known active exploits targeting CVE-2025-68805.