PT-2026-2523 · Linux+2 · Linux Kernel+2

Published 2025-10-21 · Updated 2026-05-07 · CVE-2025-68791

Positive Technologies (AI Summary)

CVSS v2.0

3.8

Low

Base vector

AV:L/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to fuse argument copies when using fuse-over-io-uring. Specifically, a missing copy finish function can lead to a reference count leak of payload pages during argument copies. This issue was addressed with simplified error cleanup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2026-00886

CVE-2025-68791

OESA-2026-1303

OESA-2026-1304

OESA-2026-1305

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 275

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68791.json · Exploit
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38393 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68218 · Security Note
• https://ubuntu.com/security/notices/USN-8183-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40252 · Security Note
• https://ubuntu.com/security/CVE-2025-68805 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71108 · Security Note
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68295 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-68791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71132 · Vendor Advisory