CVE-2025-68817

HighCVSS 7.8/10Last modified Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jan 13, 2026
Last modified: Jul 30, 2026
NVD status: Modified

Related CVEs from 2025

CVE-2025-688188.8In the Linux kernel, the following vulnerability has been resolved: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abo CVE-2025-688197.8In the Linux kernel, the following vulnerability has been resolved: media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() rlen v CVE-2025-68828.8A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP CVE-2025-68820In the Linux kernel, the following vulnerability has been resolved: ext4: xattr: fix null pointer deref in ext4_raw_inode() If ext4_get_in CVE-2025-68821In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 ("fuse: alloc CVE-2025-688227.8In the Linux kernel, the following vulnerability has been resolved: Input: alps - fix use-after-free bugs caused by dev3_register_work The CVE-2025-688235.5In the Linux kernel, the following vulnerability has been resolved: ublk: fix deadlock when reading partition table When one process(such CVE-2025-688257.5HCL Hive is affected by incorrect default permissions which could allow an attacker unauthorized lateral movement, container breakout, and i CVE-2025-68836.3A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the fil CVE-2025-688335.3HCL Hive Keycloak IAM Instance is affected by insufficient granularity of access control which could allow an attacker unauthorized access t CVE-2025-688347.5Missing Authorization vulnerability in Saiful Islam Sync Master Sheet – Product Sync with Google Sheet for WooCommerce product-sync-master-s CVE-2025-688357.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matiskiba Ravpage ravpage allows Refle