VDB
CVE-2025-68805
CVE-2025-68805
PUBLISHED
In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to list corruption and use-after-free issues. Remove the request from the queue's list for terminated non-committed requests.
EPSS 0.03% · 10.9th percentile
Risk Scores
EPSS Score
0.03%
10.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 6.14, 6.19, 0 |
| linux | linux_kernel | 6.14, 6.14 |
Timeline
- Jan 13, 2026 CVE Published
- Jan 14, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 23, 2026 EPSS Score
- Jan 26, 2026 EPSS Score
- Jan 29, 2026 EPSS Score
- Feb 1, 2026 EPSS Score
- Feb 4, 2026 EPSS Score
- Feb 6, 2026 EPSS Score
- Feb 9, 2026 EPSS Score
- Feb 12, 2026 EPSS Score
References
- https://git.kernel.org/stable/c/a6d1f1ace16d0e777a85f84267160052d3499b6e url
- https://git.kernel.org/stable/c/95c39eef7c2b666026c69ab5b30471da94ea2874 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-68805 advisory
- https://ubuntu.com/security/notices/USN-8180-5 advisory
- https://ubuntu.com/security/notices/USN-8183-2 advisory
- https://ubuntu.com/security/notices/USN-8098-10 advisory
- https://ubuntu.com/security/notices/USN-8201-1 advisory
- https://ubuntu.com/security/notices/USN-8179-3 advisory
- https://ubuntu.com/security/notices/USN-8203-1 advisory
- https://ubuntu.com/security/notices/USN-8180-4 advisory
- https://ubuntu.com/security/notices/USN-8200-1 advisory
- https://ubuntu.com/security/notices/USN-8204-1 advisory
- https://ubuntu.com/security/notices/USN-8200-2 advisory
- https://ubuntu.com/security/notices/USN-8180-3 advisory