PT-2026-1249 · Linux · Linux Kernel

Published 2025-11-06 · Updated 2026-03-07 · CVE-2025-68761

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to a potential use-after-free condition within the hfs correct next unused CNID() function. The issue arises from the order of operations where a reference count is dropped via hfs bnode put(node) before the node is dereferenced. This sequence is unsafe as it allows access to the node without a valid reference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-04218

CVE-2025-68761

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

Affected Products

Linux Kernel

References · 215

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68761.json · Exploit
• https://bdu.fstec.ru/vul/2026-04218 · Security Note
• https://ubuntu.com/security/CVE-2025-68761 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68761 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68761 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10039-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-68761 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-68761 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10301-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-68336 · Note
• https://suse.com/security/cve/CVE-2025-39999 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://suse.com/security/cve/CVE-2025-68353 · Note
• https://suse.com/security/cve/CVE-2025-40050 · Note
• https://suse.com/security/cve/CVE-2025-40013 · Note