PT-2025-51678 · Linux+3 · Linux Kernel+3

Published

2025-12-16

·

Updated

2026-05-11

·

CVE-2025-68265

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.2-ga1582f1a031e
Description The Linux kernel had a flaw related to the admin request queue lifetime in the NVMe subsystem. Namespaces could access the controller's admin request queue, and stale references could persist after the controller was torn down. This created a use-after-free condition, potentially leading to system instability. The issue stemmed from incorrect handling of the admin request queue's lifetime, specifically the timing of releasing controller references.
Recommendations Update to version 6.13.2-ga1582f1a031e or a later version to address this issue.

Exploit

Related Identifiers

AZL-72490
CVE-2025-68265
ECHO-6B4B-B27D-6775
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
OPENSUSE-SU-2026:20826-1
SUSE-SU-2026:21841-1
SUSE-SU-2026:21845-1
SUSE-SU-2026:21860-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8152-1
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu