CVE-2025-68817

CriticalCVSS 9.8

Published: 13/01/2026(UTC)Updated: 30/07/2026(UTC)Translated: 30/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

33th percentile - higher than 33% of all known CVEs

Summary

In the Linux kernel, the ksmbd module has a use-after-free vulnerability during concurrent tree-connection disconnection. The tcon object is freed on one path while another path still holds a reference.

Risk Assessment

This may lead to system crashes or potential arbitrary code execution by an attacker in kernel context.

Recommendation

Apply the patch that adds proper race condition protection in ksmbd_tree_connect_put.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.