CVE-2025-68814: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-68814DEBIAN-CVE-2025-68814
Published 13-01-2026Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-68814 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.3% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.22%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 45 · Related 42
DLA-4476-1DSA-6126-1DSA-6127-1MGASA-2026-0017MGASA-2026-0018OPENSUSE-SU-2026:20287-1

Timeline

  1. 13-01-2026
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: fix filename leak in __io_openat_prep() __io_openat_prep() allocates a struct filename using getname(). However, for the condition of the file being installed in the fixed file table as well as having O_CLOEXEC flag set, the function returns early. At that point, the request doesn't have REQ_F_NEED_CLEANUP flag set. Due to this, the memory for the newly allocated struct filename is not cleaned up, causing a memory leak. Fix this by setting the REQ_F_NEED_CLEANUP for the request just after the successful getname() call, so that when the request is torn down, the filename will be cleaned up, along with other resources needing cleanup.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

+0.01 pp

From 0.21% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu144 products
  • linux< 5.15.0-173.183 | < 6.8.0-110.110 | < 6.17.0-22.22
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1103.110 | < 6.8.0-1052.55 | < 6.17.0-1012.12
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.162-1 | < 6.12.69-1 | < 6.18.3-1
Linux1 product
  • linux≥ b9445598d8c60a1379887b957024b71343965f74, < 2420ef01b2e836fbc05a0a8c73a1016504eb0458 | ≥ b9445598d8c60a1379887b957024b71343965f74, < 8f44c4a550570cd5903625133f938c6b51310c9b | ≥ b9445598d8c60a1379887b957024b71343965f74, < 18b99fa603d0df5e1c898699c17d3b92ddc80746 | ≥ b9445598d8c60a1379887b957024b71343965f74, < e232269d511566b1f80872256a48593acc1becf4 | ≥ b9445598d8c60a1379887b957024b71343965f74, < 7fbfb85b05bc960cc50e09d03e5e562131e48d45 | ≥ b9445598d8c60a1379887b957024b71343965f74, < b14fad555302a2104948feaff70503b64c80ac01 | 5.15

3 vendors · 146 products

References

43 links
Show all 43 references