PT-2025-51729 · Linux+3 · Linux Kernel+3

Published 2025-08-14 · Updated 2026-05-26 · CVE-2025-68317

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s io uring/zctx functionality related to chained notification contexts. The issue involves incorrectly handling notification completion, potentially leading to unexpected behavior. The fix ensures that notification contexts are correctly linked to ubuf info only for requests originating from the same context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-1288

Related Identifiers

BDU:2026-03165

CVE-2025-68317

ECHO-3D51-9DCB-3BD0

OPENSUSE-SU-2026:20145-1

SUSE-SU-2026:20207-1

SUSE-SU-2026:20220-1

SUSE-SU-2026:20228-1

USN-8029-1

USN-8029-2

USN-8029-3

USN-8030-1

USN-8048-1

Affected Products

Debian

Linuxmint

Linux Kernel

Ubuntu

References · 861

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68317.json · Exploit
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40294 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40106 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40341 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68183 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-68317 · Security Note
• https://ubuntu.com/security/CVE-2025-40285 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40119 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40102 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8029-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40049 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68180 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40292 · Vendor Advisory