CVE-2025-68226
High
Description
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix incomplete backport in cfids_invalidation_worker() The previous commit bdb596ceb4b7 ("smb: client: fix potential UAF in smb2_close_cached_fid()") was an incomplete backport and missed one kref_put() call in cfids_invalidation_worker() that should have been converted to close_cached_dir().
SeverityHigh
CVSS8.8
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linuxabd29b6e17a918fdd68352ce4813e167acc8727e, 6.17.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | bdb596ceb4b7c3f28786a33840263728217fbcf5 ≤ v < abd29b6e17a918fdd68352ce4813e167acc8727e, 6.17.8 ≤ v < 6.17.10 | abd29b6e17a918fdd68352ce4813e167acc8727e, 6.17.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.