First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2025-68300

Not scored yetLast modified Oct 14, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/namespace: fix reference leak in grab_requested_mnt_ns

lookup_mnt_ns() already takes a reference on mnt_ns. grab_requested_mnt_ns() doesn't need to take an extra reference.

Metrics

No CVSS score has been published yet.

Affected software

Vendor	Product	Versions
Linux	Linux	>= ba306daa7fa8ae0be5d64c215e9d43a88b4bc8bf, < 4a16b2a0c1f033f95f5d0b98b9e40e8bf7c4c2c5; >= 8ff97ade912dcfc5ac1783c4b8d615aacd26fd17, < fe256e59b8e7f126b2464ee32bd9fee131f0a883; >= 78f0e33cd6c939a555aa80dbed2fec6b333a7660, < 7b6dcd9bfd869eee7693e45b1817dac8c56e5f86
Linux	Linux	>= 6.12.59, < 6.12.61; >= 6.17.9, < 6.17.11

References

Timeline

Published: Dec 16, 2025
Last modified: Oct 14, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-683019.8In the Linux kernel, the following vulnerability has been resolved: net: atlantic: fix fragment overflow handling in RX path The atlantic CVE-2025-683027.5In the Linux kernel, the following vulnerability has been resolved: net: sxgbe: fix potential NULL dereference in sxgbe_rx() Currently, wh CVE-2025-683037.8In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corruption This passes the CVE-2025-683048.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: lookup hci_conn on RX path on protocol side The h CVE-2025-68305In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sock: Prevent race in socket write iter and sock bind T CVE-2025-68306In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso int CVE-2025-68307In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted CVE-2025-68308In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers CVE-2025-68309In the Linux kernel, the following vulnerability has been resolved: PCI/AER: Fix NULL pointer access by aer_info The kzalloc(GFP_KERNEL) m CVE-2025-68316.4The User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's urcr_restrict shortcode in all vers CVE-2025-68310In the Linux kernel, the following vulnerability has been resolved: s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump Do CVE-2025-68311In the Linux kernel, the following vulnerability has been resolved: tty: serial: ip22zilog: Use platform device for probing After commit 8

CVE-2025-68300: Unscored | Vulnix