Riskcovery

CVE-2025-68805

fuse: fix io-uring list corruption for terminated non-committed requests

State
Published
Severity
7.8 High
Published
Jan 13, 2026
Updated
Aug 5, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fuse: fix io-uring list corruption for terminated non-committed requests

When a request is terminated before it has been committed, the request is not removed from the queue's list. This leaves a dangling list entry that leads to list corruption and use-after-free issues.

Remove the request from the queue's list for terminated non-committed requests.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c090c8abae4b6b77a1bee116aa6c385456ebef96 to before a6d1f1ace16d0e777a85f84267160052d3499b6eAffected
  • c090c8abae4b6b77a1bee116aa6c385456ebef96 to before 95c39eef7c2b666026c69ab5b30471da94ea2874Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.3 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.