9.8
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
Описание
Оригинално описание
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.
Засегнати продукти
- Linux Linux: dd45db4d9bbc8f122a9b4db5ce94ae29fcf03d3c преди 446beed646b2e426dd53d27358365f8678e1dd01; 7b58ee8d0b91359554cf219cd4f33872ea2afd66 преди d092de8a26c952379ded8e6b0bda31d89befac1a; 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e преди d64977495e44855f2b28d8ce56107c963a7a50e4; 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e преди 21a3d01fc6db5129f81edb0ab7cb94fd758bcbea; 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e преди 063cbbc6f595ea36ad146e1b7d2af820894beb21; 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e преди b39a1833cc4a2755b02603eec3a71a85e9dff926; 5.15.145 преди 5.15.199; 6.1.71 преди 6.1.160
- Linux Linux: 6.6; преди 6.6; 5.15.199 до 5.15.*; 6.1.160 до 6.1.*; 6.6.120 до 6.6.*; 6.12.64 до 6.12.*; 6.18.3 до 6.18.*; от 6.19 нататък
История
- 13 януари 2026 Публикувано
Други уязвимости в Linux Linux
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2025-68817
- https://nvd.nist.gov/vuln/detail/CVE-2025-68817
- https://git.kernel.org/stable/c/446beed646b2e426dd53d27358365f8678e1dd01
- https://git.kernel.org/stable/c/d092de8a26c952379ded8e6b0bda31d89befac1a
- https://git.kernel.org/stable/c/d64977495e44855f2b28d8ce56107c963a7a50e4
- https://git.kernel.org/stable/c/21a3d01fc6db5129f81edb0ab7cb94fd758bcbea
- https://git.kernel.org/stable/c/063cbbc6f595ea36ad146e1b7d2af820894beb21
- https://git.kernel.org/stable/c/b39a1833cc4a2755b02603eec3a71a85e9dff926