PT-2026-2516 · Linux+2 · Linux Kernel+2

Published 2025-12-04 · Updated 2026-05-07 · CVE-2025-68784

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free issue within the xattr repair functionality. Specifically, the xchk setup xattr buf function can allocate a new value buffer, potentially leading to a dangling pointer if a reference to ab->value is used before the call completes. The issue is addressed by moving an assignment to after the buffer setup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-00739

CVE-2025-68784

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 621

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68784.json · Exploit
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71098 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8183-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68805 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68803 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71084 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8177-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71097 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71122 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71079 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68795 · Vendor Advisory