PT-2025-51703 · Linux+3 · Linux Kernel+3
Published
2025-12-16
·
Updated
2026-04-06
·
CVE-2025-68299
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the allocation of a cell's anonymous key within the AFS (Andrew File System) subsystem. Specifically, the issue arises from delayed allocation of this key, potentially leading to errors when the key lookup attempts to use a key description before it is fully set. The problem is triggered during cell setup, including DNS upcalls, when parsing device names provided to the mount function. The fix involves allocating a reference name and attaching it to the afs cell record during creation, allocating the anonymous key on demand with a mutex to prevent multiple allocations, and handling cases where the anonymous key is not yet allocated in
afs request key rcu().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Afs
Linuxmint
Linux Kernel
Ubuntu