CVE-2025-68817 (GCVE-0-2025-68817)

Vulnerability from cvelistv5 – Published: 2026-01-13 15:29 – Updated: 2026-08-05 12:11
VLAI
Title
ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency
Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency Under high concurrency, A tree-connection object (tcon) is freed on a disconnect path while another path still holds a reference and later executes *_put()/write on it.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version
Linux Linux Affected: dd45db4d9bbc8f122a9b4db5ce94ae29fcf03d3c , < 446beed646b2e426dd53d27358365f8678e1dd01 (git)
Affected: 7b58ee8d0b91359554cf219cd4f33872ea2afd66 , < d092de8a26c952379ded8e6b0bda31d89befac1a (git)
Affected: 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e , < d64977495e44855f2b28d8ce56107c963a7a50e4 (git)
Affected: 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e , < 21a3d01fc6db5129f81edb0ab7cb94fd758bcbea (git)
Affected: 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e , < 063cbbc6f595ea36ad146e1b7d2af820894beb21 (git)
Affected: 33b235a6e6ebe0f05f3586a71e8d281d00f71e2e , < b39a1833cc4a2755b02603eec3a71a85e9dff926 (git)
Affected: 5.15.145 , < 5.15.199 (semver)
Affected: 6.1.71 , < 6.1.160 (semver)
Create a notification for this product.
Linux Linux Affected: 6.6
Unaffected: 0 , < 6.6 (semver)
Unaffected: 5.15.199 , ≤ 5.15.* (semver)
Unaffected: 6.1.160 , ≤ 6.1.* (semver)
Unaffected: 6.6.120 , ≤ 6.6.* (semver)
Unaffected: 6.12.64 , ≤ 6.12.* (semver)
Unaffected: 6.18.3 , ≤ 6.18.* (semver)
Unaffected: 6.19 , ≤ * (original_commit_for_fix)
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/server/mgmt/tree_connect.c",
            "fs/smb/server/mgmt/tree_connect.h",
            "fs/smb/server/smb2pdu.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "446beed646b2e426dd53d27358365f8678e1dd01",
              "status": "affected",
              "version": "dd45db4d9bbc8f122a9b4db5ce94ae29fcf03d3c",
              "versionType": "git"
            },
            {
              "lessThan": "d092de8a26c952379ded8e6b0bda31d89befac1a",
              "status": "affected",
              "version": "7b58ee8d0b91359554cf219cd4f33872ea2afd66",
              "versionType": "git"
            },
            {
              "lessThan": "d64977495e44855f2b28d8ce56107c963a7a50e4",
              "status": "affected",
              "version": "33b235a6e6ebe0f05f3586a71e8d281d00f71e2e",
              "versionType": "git"
            },
            {
              "lessThan": "21a3d01fc6db5129f81edb0ab7cb94fd758bcbea",
              "status": "affected",
              "version": "33b235a6e6ebe0f05f3586a71e8d281d00f71e2e",
              "versionType": "git"
            },
            {
              "lessThan": "063cbbc6f595ea36ad146e1b7d2af820894beb21",
              "status": "affected",
              "version": "33b235a6e6ebe0f05f3586a71e8d281d00f71e2e",
              "versionType": "git"
            },
            {
              "lessThan": "b39a1833cc4a2755b02603eec3a71a85e9dff926",
              "status": "affected",
              "version": "33b235a6e6ebe0f05f3586a71e8d281d00f71e2e",
              "versionType": "git"
            },
            {
              "lessThan": "5.15.199",
              "status": "affected",
              "version": "5.15.145",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.160",
              "status": "affected",
              "version": "6.1.71",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/smb/server/mgmt/tree_connect.c",
            "fs/smb/server/mgmt/tree_connect.h",
            "fs/smb/server/smb2pdu.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.6"
            },
            {
              "lessThan": "6.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.199",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.160",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.199",
                  "versionStartIncluding": "5.15.145",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.160",
                  "versionStartIncluding": "6.1.71",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.120",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.64",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.3",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "6.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency\n\nUnder high concurrency, A tree-connection object (tcon) is freed on\na disconnect path while another path still holds a reference and later\nexecutes *_put()/write on it."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - ksmbd processes remotely supplied SMB2/3 requests over TCP port 445, with the request path reaching smb2_tree_disconnect and ksmbd_tree_connect_put in kernel context.\nAC:L - A remote client can control both sides by issuing concurrent tree-scoped requests and SMB2_TREE_DISCONNECT against its own tree connection. ksmbd permits thousands of in-flight work items, allowing repeated race attempts without conditions outside attacker control.\nPR:N - The path requires a valid SMB session and tree ID, but ksmbd supports public guest shares and skips password verification for guest accounts. An attacker can therefore establish the required session and tree without credentials in a reasonable deployment.\nUI:N - Once the SMB server and share are available, the attacker triggers the race entirely through network requests without victim action.\nS:U - The UAF corrupts the ksmbd host kernel within the same security authority; it does not inherently cross a VM, IOMMU, or other separate security boundary.\nC:H - The final reference release accesses the freed tcon wait-queue list, which can operate on attacker-influenced contents after heap reclamation. This kernel UAF can plausibly provide arbitrary memory disclosure rather than only a bounded leak.\nI:H - wake_up can lock and traverse the reclaimed wait queue, causing writes and an indirect function call through stale contents. Heap spraying can therefore support arbitrary write or kernel control-flow hijacking.\nA:H - Invalid wait-queue pointers, corrupted lock state, or a stale indirect call can cause a kernel oops or panic. The remotely controlled race can be attempted repeatedly."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T12:11:44.783Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/446beed646b2e426dd53d27358365f8678e1dd01"
        },
        {
          "url": "https://git.kernel.org/stable/c/d092de8a26c952379ded8e6b0bda31d89befac1a"
        },
        {
          "url": "https://git.kernel.org/stable/c/d64977495e44855f2b28d8ce56107c963a7a50e4"
        },
        {
          "url": "https://git.kernel.org/stable/c/21a3d01fc6db5129f81edb0ab7cb94fd758bcbea"
        },
        {
          "url": "https://git.kernel.org/stable/c/063cbbc6f595ea36ad146e1b7d2af820894beb21"
        },
        {
          "url": "https://git.kernel.org/stable/c/b39a1833cc4a2755b02603eec3a71a85e9dff926"
        }
      ],
      "title": "ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68817",
    "datePublished": "2026-01-13T15:29:21.210Z",
    "dateReserved": "2025-12-24T10:30:51.048Z",
    "dateUpdated": "2026-08-05T12:11:44.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-68817",
      "date": "2026-08-05",
      "epss": "0.004",
      "percentile": "0.32769"
    },
    "microsoft_vex": {
      "current_release_date": "2026-03-03T01:39:06.000Z",
      "cve": "CVE-2025-68817",
      "id": "msrc_CVE-2025-68817",
      "initial_release_date": "2026-01-02T00:00:00.000Z",
      "product_status:known_affected": "1",
      "product_status:known_not_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2025-68817.json",
      "version": "6"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-68817\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-01-13T16:16:03.983\",\"lastModified\":\"2026-07-30T06:24:47.250\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency\\n\\nUnder high concurrency, A tree-connection object (tcon) is freed on\\na disconnect path while another path still holds a reference and later\\nexecutes *_put()/write on it.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nksmbd: correcci\u00f3n de uso despu\u00e9s de liberaci\u00f3n en ksmbd_tree_connect_put bajo concurrencia\\n\\nBajo alta concurrencia, un objeto de conexi\u00f3n de \u00e1rbol (tcon) es liberado en una ruta de desconexi\u00f3n mientras otra ruta a\u00fan mantiene una referencia y posteriormente ejecuta *_put()/write sobre \u00e9l.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/smb/server/mgmt/tree_connect.c\",\"fs/smb/server/mgmt/tree_connect.h\",\"fs/smb/server/smb2pdu.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"dd45db4d9bbc8f122a9b4db5ce94ae29fcf03d3c\",\"lessThan\":\"446beed646b2e426dd53d27358365f8678e1dd01\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7b58ee8d0b91359554cf219cd4f33872ea2afd66\",\"lessThan\":\"d092de8a26c952379ded8e6b0bda31d89befac1a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33b235a6e6ebe0f05f3586a71e8d281d00f71e2e\",\"lessThan\":\"d64977495e44855f2b28d8ce56107c963a7a50e4\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33b235a6e6ebe0f05f3586a71e8d281d00f71e2e\",\"lessThan\":\"21a3d01fc6db5129f81edb0ab7cb94fd758bcbea\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33b235a6e6ebe0f05f3586a71e8d281d00f71e2e\",\"lessThan\":\"063cbbc6f595ea36ad146e1b7d2af820894beb21\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33b235a6e6ebe0f05f3586a71e8d281d00f71e2e\",\"lessThan\":\"b39a1833cc4a2755b02603eec3a71a85e9dff926\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.15.145\",\"lessThan\":\"5.15.199\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.71\",\"lessThan\":\"6.1.160\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/smb/server/mgmt/tree_connect.c\",\"fs/smb/server/mgmt/tree_connect.h\",\"fs/smb/server/smb2pdu.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.6\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.6\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.199\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.160\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.120\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.64\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.3\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.15.145\",\"versionEndExcluding\":\"5.15.199\",\"matchCriteriaId\":\"E1261CF8-0493-4918-93E6-5CC197F7F5E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.71\",\"versionEndExcluding\":\"6.1.160\",\"matchCriteriaId\":\"9295139C-2E02-401E-8245-07E821E9CCF0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.6.1\",\"versionEndExcluding\":\"6.6.120\",\"matchCriteriaId\":\"C5F84D90-D922-47D3-B042-99569840DD8F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.7\",\"versionEndExcluding\":\"6.12.64\",\"matchCriteriaId\":\"32BF4A52-377C-44ED-B5E6-7EA5D896E98B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.13\",\"versionEndExcluding\":\"6.18.3\",\"matchCriteriaId\":\"2DC484D8-FB4F-4112-900F-AE333B6FE7A7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"E346B162-D566-4E62-ABDE-ECBFB21B8BFD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"E7C78D0A-C4A2-4D41-B726-8979E33AD0F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"E114E9DD-F7E1-40CC-AAD5-F14E586CB2E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.6:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC5BD782-474C-4A68-AED7-6EC818FF89AE\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/063cbbc6f595ea36ad146e1b7d2af820894beb21\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/21a3d01fc6db5129f81edb0ab7cb94fd758bcbea\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/446beed646b2e426dd53d27358365f8678e1dd01\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/b39a1833cc4a2755b02603eec3a71a85e9dff926\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d092de8a26c952379ded8e6b0bda31d89befac1a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d64977495e44855f2b28d8ce56107c963a7a50e4\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T11:12:13+00:00",
      "cve": "CVE-2025-68817",
      "id": "CVE-2025-68817",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68817.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-07-24T16:35:43Z",
      "cve": "CVE-2025-68817",
      "id": "CVE-2025-68817",
      "initial_release_date": "2026-01-18T00:24:14Z",
      "product_status:known_not_affected": "353",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2025-68817",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2025-68817.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.