PT-2026-2537 · Linux+2 · Linux Kernel+2

Published 2026-01-13 · Updated 2026-05-07 · CVE-2025-68805

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s fuse implementation related to io-uring. Specifically, when a request is terminated before commitment, it isn’t removed from the queue’s list, resulting in a dangling list entry. This can lead to list corruption and use-after-free issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68805

OESA-2026-1303

OESA-2026-1304

OESA-2026-1305

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 273

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68805.json · Exploit
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38393 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68218 · Security Note
• https://ubuntu.com/security/notices/USN-8183-2 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40252 · Security Note
• https://ubuntu.com/security/CVE-2025-68805 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71108 · Security Note
• https://ubuntu.com/security/CVE-2025-71080 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68295 · Security Note
• https://ubuntu.com/security/CVE-2025-71131 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71132 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40320 · Security Note