PT-2025-52897 · Linux+4 · Linux Kernel+4

Published 2025-11-24 · Updated 2026-04-06 · CVE-2025-68361

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the erofs filesystem. Specifically, the issue involves insufficient limitations on filesystem stacking for file-backed mounts, potentially leading to a kernel stack overflow when erofs mounts itself.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-119

Related Identifiers

BDU:2026-02431

CVE-2025-68361

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Debian

Linuxmint

Linux Kernel

Ubuntu

Erofs

References · 841

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68361.json · Exploit
• https://ubuntu.com/security/CVE-2025-68227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68738 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8094-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68301 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68307 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68215 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40250 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68256 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8094-4 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-68361 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68359 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68259 · Vendor Advisory