PT-2026-1249 · Linux · Linux Kernel

Publicado 2025-11-06 · Atualizado 2026-03-07 · CVE-2025-68761

Positive Technologies (AI Summary)

CVSS v2.0

7.7

Alta

Vetor base

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to a potential use-after-free condition within the hfs correct next unused CNID() function. The issue arises from the order of operations where a reference count is dropped via hfs bnode put(node) before the node is dereferenced. This sequence is unsafe as it allows access to the node without a valid reference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

BDU:2026-04218

CVE-2025-68761

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

Produtos afetados

Linux Kernel

Referências · 215

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68761.json · Exploit
• https://suse.com/security/cve/CVE-2025-68336 · Nota
• https://suse.com/security/cve/CVE-2025-39999 · Nota
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Nota
• https://suse.com/security/cve/CVE-2025-68353 · Nota
• https://suse.com/security/cve/CVE-2025-40050 · Nota
• https://suse.com/security/cve/CVE-2025-40013 · Nota
• https://suse.com/security/cve/CVE-2025-68362 · Nota
• https://bdu.fstec.ru/vul/2026-04218 · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-68759 · Nota
• https://suse.com/security/cve/CVE-2025-68749 · Nota
• https://suse.com/security/cve/CVE-2025-68365 · Nota
• https://suse.com/security/cve/CVE-2025-68376 · Nota
• https://suse.com/security/cve/CVE-2025-40032 · Nota
• https://suse.com/security/cve/CVE-2025-68359 · Nota