CVE-2025-68805

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2025
Source publication: Jan 13, 2026
Source updated: Aug 5, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

fuse: fix io-uring list corruption for terminated non-committed requests

In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to list corruption and use-after-free issues. Remove the request from the queue's list for terminated non-committed requests.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linux

Vendor: Linux
Product: Linux
Platforms: Unknown
Default status: unaffected

Linux · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
c090c8abae4b6b77a1bee116aa6c385456ebef96	`affected`	git	a6d1f1ace16d0e777a85f84267160052d3499b6e	Unavailable	None listed
c090c8abae4b6b77a1bee116aa6c385456ebef96	`affected`	git	95c39eef7c2b666026c69ab5b30471da94ea2874	Unavailable	None listed

Linux

Vendor: Linux
Product: Linux
Platforms: Unknown
Default status: affected

Linux · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.14	`affected`	Unavailable	Unavailable	Unavailable	None listed
0	`unaffected`	semver	6.14	Unavailable	None listed
6.18.3	`unaffected`	semver	Unavailable	6.18.*	None listed
6.19	`unaffected`	original_commit_for_fix	Unavailable	*	None listed