PT-2026-2549 · Linux+2 · Linux Kernel+2

Published

2026-01-13

·

Updated

2026-05-26

·

CVE-2025-68817

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the ksmbd module. Specifically, a use-after-free condition can occur in the ksmbd tree connect put function under conditions of high concurrency. This happens when a tree-connection object (tcon) is freed during a disconnect process while another process still holds a reference to it and attempts to operate on it.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2025-68817
ECHO-258B-D1AE-4287
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1760
USN-8162-1
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8180-1
USN-8180-2
USN-8180-3
USN-8180-4
USN-8180-5
USN-8180-6
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8186-1
USN-8187-1
USN-8188-1
USN-8203-1
USN-8204-1
USN-8243-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1
USN-8275-1
USN-8297-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu