7.5

CVE-2025-68246: linux

CVSS: 7.5v3.1HighDeferred
AliasesUBUNTU-CVE-2025-68246DEBIAN-CVE-2025-68246
Published 16-12-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2025-68246 is a high (CVSS 7.5) vulnerability in linux. EPSS estimates a 0.41% chance of exploitation in the next 30 days, higher than 34.3% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.41%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 18 · Related 15
DLA-4436-1MGASA-2026-0017MGASA-2026-0018USN-8029-1USN-8029-2USN-8029-3

Timeline

  1. 16-12-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbd_kthread_fn(), the code sets ret = -EAGAIN and continues the accept loop without closing the just-accepted socket. That leaks one socket per rejected attempt from a single IP and enables a trivial remote DoS. Release client_sk before continuing. This bug was found with ZeroPath.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.41%

Chance of exploitation in the next 30 days

Percentile

34%

Versus all other CVEs

30-day change

0.00 pp

From 0.41% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.41%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu154 products
  • linuxAll versions (No fix recorded) | < 6.8.0-106.106 | < 6.17.0-14.14
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1050.53 | < 6.17.0-1007.7
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.9-1
Linux1 product
  • linux≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 7a3c7154d5fc05956a8ad9e72ecf49e21555bfca | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 5746b2a0f5eb3d79667b3c51fe849bd62464220e | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 4587a7826be1ae0190dba10ff70b46bb0e3bc7d3 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 35521b5a7e8a184548125f4530552101236dcda1 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9 | 5.15

3 vendors · 156 products

References

24 links
Show all 24 references