CVE-2025-68246
High
Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: close accepted socket when per-IP limit rejects connection When the per-IP connection limit is exceeded in ksmbd_kthread_fn(), the code sets ret = -EAGAIN and continues the accept loop without closing the just-accepted socket. That leaks one socket per rejected attempt from a single IP and enables a trivial remote DoS. Release client_sk before continuing. This bug was found with ZeroPath.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux7a3c7154d5fc05956a8ad9e72ecf49e21555bfca, 5746b2a0f5eb3d79667b3c51fe849bd62464220e, 4587a7826be1ae0190dba10ff70b46bb0e3bc7d3, 35521b5a7e8a184548125f4530552101236dcda1, 98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 0626e6641f6b467447c81dd7678a69c66f7746cf ≤ v < 7a3c7154d5fc05956a8ad9e72ecf49e21555bfca, 0626e6641f6b467447c81dd7678a69c66f7746cf ≤ v < 5746b2a0f5eb3d79667b3c51fe849bd62464220e, 0626e6641f6b467447c81dd7678a69c66f7746cf ≤ v < 4587a7826be1ae0190dba10ff70b46bb0e3bc7d3, 0626e6641f6b467447c81dd7678a69c66f7746cf ≤ v < 35521b5a7e8a184548125f4530552101236dcda1, 0626e6641f6b467447c81dd7678a69c66f7746cf ≤ v < 98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9, 5.15 | 7a3c7154d5fc05956a8ad9e72ecf49e21555bfca, 5746b2a0f5eb3d79667b3c51fe849bd62464220e, 4587a7826be1ae0190dba10ff70b46bb0e3bc7d3, 35521b5a7e8a184548125f4530552101236dcda1, 98a5fd31cbf72d46bf18e50b3ab0ce86d5f319a9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.