Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-68805

fuse: fix io-uring list corruption for terminated non-committed requests

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fuse: fix io-uring list corruption for terminated non-committed requests When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to list corruption and use-after-free issues. Remove the request from the queue's list for terminated non-committed requests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c090c8abae4b6b77a1bee116aa6c385456ebef96 to < a6d1f1ace16d0e777a85f84267160052d3499b6eaffected
  • c090c8abae4b6b77a1bee116aa6c385456ebef96 to < 95c39eef7c2b666026c69ab5b30471da94ea2874affected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.18.3 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References