CVE-2025-68226

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's SMB client related to an incomplete backport in the cfids invalidation worker() function. A previous commit aimed to address a potential use-after-free condition in smb2 close cached fid(), but the backport was incomplete, missing a necessary kref put() call within cfids invalidation worker(). This missing call should have been converted to close cached dir().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.