PT-2025-52895 · Linux+3 · Linux Kernel+3

CVE-2025-68359

·

Published

2025-12-24

·

Updated

2026-08-30

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to double freeing of a qgroup record after a failure to add a delayed reference head. Specifically, the issue arises from a double kfree() scenario within the add delayed ref head() function. This could occur if a record was incorrectly reported as existing, leading to a subsequent error and an attempt to free the same memory twice. The fix shifts the ownership of the 'qrecord' object, ensuring the caller is solely responsible for freeing the memory, except in cases where the record was inserted into tracing logic. The qrecord inserted ret boolean has been updated to ensure proper initialization and accurate tracking of record insertion status.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2025-68359
OPENSUSE-SU-2026:10039-1
OPENSUSE-SU-2026:10301-1
OPENSUSE-SU-2026:20287-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20570-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8152-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu