CVE-2025-68294
High
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: ensure vectored buffer node import is tied to notification When support for vectored registered buffers was added, the import itself is using 'req' rather than the notification io_kiocb, sr->notif. For non-vectored imports, sr->notif is correctly used. This is important as the lifetime of the two may be different. Use the correct io_kiocb for the vectored buffer import.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux14459281e027f23b70885c1cc1032a71c0efd8d7, f6041803a831266a2a5a5b5af66f7de0845bcbf3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 23371eac7d9a9bca5360cfb3eb3aa08648ee7246 ≤ v < 14459281e027f23b70885c1cc1032a71c0efd8d7, 23371eac7d9a9bca5360cfb3eb3aa08648ee7246 ≤ v < f6041803a831266a2a5a5b5af66f7de0845bcbf3, 6.15 | 14459281e027f23b70885c1cc1032a71c0efd8d7, f6041803a831266a2a5a5b5af66f7de0845bcbf3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.