PT-2025-51698 · Linux+2 · Linux Kernel+2

Published 2025-12-16 · Updated 2026-04-06 · CVE-2025-68294

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s io uring/net functionality. Specifically, the import process for vectored registered buffers incorrectly uses 'req' instead of the correct io kiocb, 'sr->notif', leading to potential lifetime management issues. This discrepancy occurs only with vectored imports, while non-vectored imports function correctly. The issue arises because the lifetimes of 'req' and 'sr->notif' may differ.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68294

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 211

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68294.json · Exploit
• https://ubuntu.com/security/CVE-2025-68227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8152-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23060 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68742 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68283 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68220 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68362 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40255 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68738 · Vendor Advisory