CVE-2025-68809

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel’s ksmbd component has an issue related to inconsistent locking when accessing the m flags field within the vfs cache. Specifically, some code paths read and modify m flags under ci->m lock, while others do not, creating a data race. This can lead to a loss or inconsistent state of delete-on-close and pending-delete bits, resulting in unexpected file deletion behavior, such as files remaining on disk after a delete-on-close operation or disappearing while still in use. The issue affects functions like ksmbd query inode status(), ksmbd inode close(), ksmbd inode pending delete(), ksmbd set inode pending delete(), ksmbd clear inode pending delete(), and ksmbd fd set delete on close().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.