Riskcovery

CVE-2025-68791

fuse: missing copy_finish in fuse-over-io-uring argument copies

State
Published
Severity
Not scored
Published
Jan 13, 2026
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fuse: missing copy_finish in fuse-over-io-uring argument copies

Fix a possible reference count leak of payload pages during fuse argument copies.

[Joanne: simplified error cleanup]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c090c8abae4b6b77a1bee116aa6c385456ebef96 to before b79938863f436960eff209130f025c4bd3026bf8Affected
  • c090c8abae4b6b77a1bee116aa6c385456ebef96 to before 6e0d7f7f4a43ac8868e98c87ecf48805aa8c24ddAffected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.3 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.