PT-2025-52902 · Linux+4 · Linux Kernel+4
CVE-2025-68366
·
Published
2025-11-11
·
Updated
2026-06-16
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a use-after-free issue within the nbd genl connect function. This occurs when handling NBD CMD CONNECT and NBD CLEAR SOCK operations, specifically related to the
config refs counter. The issue arises from a potential race condition where the configuration reference count is decremented to zero before it is used, leading to a use-after-free condition. A delay introduced before incrementing the reference count in nbd genl connect() can reproduce the problem. The vulnerable function is nbd genl connect().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Buffer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Rocky Linux
Ubuntu