CVE-2025-68817: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix use-after-free in ksmbdtreeconnectput under concurrency
Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes put()/write on it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68817?
CVE-2025-68817 has a high severity rating due to the potential for exploitation during high concurrency operations.
How does CVE-2025-68817 affect the Linux kernel?
CVE-2025-68817 impacts the Linux kernel by introducing a use-after-free vulnerability in the ksmbd_tree_connect_put function.
How do I fix CVE-2025-68817?
To fix CVE-2025-68817, update to the latest patched version of the Linux kernel that addresses this vulnerability.
What are the potential consequences of CVE-2025-68817 if exploited?
If exploited, CVE-2025-68817 could lead to denial of service or potentially allow an attacker to execute arbitrary code.
In which versions of the Linux kernel does CVE-2025-68817 exist?
CVE-2025-68817 exists in various versions of the Linux kernel prior to the application of fixes that address this vulnerability.