CVE-2025-68788: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-68788DEBIAN-CVE-2025-68788
Published 13-01-2026Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-68788 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.24% chance of exploitation in the next 30 days, higher than 14% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.24%
0%100%
Low · +0.03 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 47 · Related 43
DLA-4475-1DLA-4476-1DSA-6126-1DSA-6127-1MGASA-2026-0017MGASA-2026-0018

Timeline

  1. 13-01-2026
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: fsnotify: do not generate ACCESS/MODIFY events on child for special files inotify/fanotify do not allow users with no read access to a file to subscribe to events (e.g. IN_ACCESS/IN_MODIFY), but they do allow the same user to subscribe for watching events on children when the user has access to the parent directory (e.g. /dev). Users with no read access to a file but with read access to its parent directory can still stat the file and see if it was accessed/modified via atime/mtime change. The same is not true for special files (e.g. /dev/null). Users will not generally observe atime/mtime changes when other users read/write to special files, only when someone sets atime/mtime via utimensat(). Align fsnotify events with this stat behavior and do not generate ACCESS/MODIFY events to parent watchers on read/write of special files. The events are still generated to parent watchers on utimensat(). This closes some side-channels that could be possibly used for information exfiltration [1]. [1] https://snee.la/pdf/pubs/file-notification-attacks.pdf

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.24%

Chance of exploitation in the next 30 days

Percentile

14%

Versus all other CVEs

30-day change

+0.03 pp

From 0.21% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.24%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu157 products
  • linuxAll versions (No fix recorded) | < 5.15.0-173.183 | < 6.8.0-110.110 | < 6.17.0-22.22
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1103.110 | < 6.8.0-1052.55 | < 6.17.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.162-1 | < 6.12.69-1 | < 6.18.3-1
Linux1 product
  • linux≥ 72acc854427948efed7a83da27f7dc3239ac9afc, < df2711544b050aba703e6da418c53c7dc5d443ca | ≥ 72acc854427948efed7a83da27f7dc3239ac9afc, < 859bdf438f01d9aa7f84b09c1202d548c7cad9e8 | ≥ 72acc854427948efed7a83da27f7dc3239ac9afc, < 6a7d7d96eeeab7af2bd01afbb3d9878a11a13d91 | ≥ 72acc854427948efed7a83da27f7dc3239ac9afc, < e0643d46759db8b84c0504a676043e5e341b6c81 | ≥ 72acc854427948efed7a83da27f7dc3239ac9afc, < 82f7416bcbd951549e758d15fc1a96a5afc2e900 | ≥ 72acc854427948efed7a83da27f7dc3239ac9afc, < 7a93edb23bcf07a3aaf8b598edfc2faa8fbcc0b6 | ≥ 72acc854427948efed7a83da27f7dc3239ac9afc, < 635bc4def026a24e071436f4f356ea08c0eed6ff | 2.6.36

3 vendors · 159 products

References

44 links
Show all 44 references