CVE-2025-68817: linux Use After Free
CVSS: 9.8v3.1CriticalModified
AliasesUBUNTU-CVE-2025-68817DEBIAN-CVE-2025-68817
Published 13-01-2026Last modified 05-08-2026
Vulnerability summary
CVE-2025-68817 is a critical (CVSS 9.8) Use After Free vulnerability in linux. EPSS estimates a 0.45% chance of exploitation in the next 30 days, higher than 37.5% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
0.45%
0%100%
Low · -0.01 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 36 · Related 33DLA-4476-1DSA-6126-1DSA-6127-1MGASA-2026-0017MGASA-2026-0018USN-8162-1USN-8177-1USN-8177-2USN-8179-1USN-8179-2USN-8179-3USN-8179-4USN-8180-1USN-8180-2USN-8180-3USN-8180-4USN-8180-5USN-8180-6USN-8183-1USN-8183-2USN-8184-1USN-8185-1USN-8185-2USN-8186-1USN-8187-1USN-8188-1USN-8203-1USN-8204-1USN-8243-1USN-8245-1USN-8258-1USN-8261-1USN-8265-1USN-8275-1USN-8297-1USN-8440-1USN-8257-1USN-8260-1
Timeline
- 13-01-2026PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.
CVSS metrics
5 scores · 4 sources · 2 versionsHigh 7.7Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NSourcesSingle source
Critical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSources4 sources · 7.8–9.8
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
EPSS trend
Probability
0.45%
Chance of exploitation in the next 30 days
Percentile
38%
Versus all other CVEs
30-day change
-0.01 pp
From 0.45% on 19-09-2026
19-09-202619-10-2026
EPSS score0.45%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu144 products
- linux< 5.15.0-176.186 | < 6.8.0-110.110 | < 6.17.0-22.22
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1105.112 | < 6.8.0-1052.55 | < 6.17.0-1012.12
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ dd45db4d9bbc8f122a9b4db5ce94ae29fcf03d3c, < 446beed646b2e426dd53d27358365f8678e1dd01 | ≥ 7b58ee8d0b91359554cf219cd4f33872ea2afd66, < d092de8a26c952379ded8e6b0bda31d89befac1a | ≥ 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e, < d64977495e44855f2b28d8ce56107c963a7a50e4 | ≥ 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e, < 21a3d01fc6db5129f81edb0ab7cb94fd758bcbea | ≥ 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e, < 063cbbc6f595ea36ad146e1b7d2af820894beb21 | ≥ 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e, < b39a1833cc4a2755b02603eec3a71a85e9dff926 | ≥ 5.15.145, < 5.15.199 | ≥ 6.1.71, < 6.1.160 | 6.6
- linux_kernel≥ 5.15.145, < 5.15.199 | ≥ 6.1.71, < 6.1.160 | ≥ 6.6.1, < 6.6.120 | ≥ 6.7, < 6.12.64 | ≥ 6.13, < 6.18.3 | 6.6 | 6.6:rc5 | 6.6:rc6 | 6.6:rc7
Debian1 product
- linux< 6.1.162-1 | < 6.12.69-1 | < 6.18.3-1
3 vendors · 147 products
