CVE-2025-68317

High

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/zctx: check chained notif contexts Send zc only links ubuf_info for requests coming from the same context. There are some ambiguous syz reports, so let's check the assumption on notification completion.

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedDec 16, 2025
First seenDec 16, 2025

How to fix

Update
  • Linux Linuxaaafd17d3f4be2c15539359a5b4bfa00237f687f, d664a3ce3a604231a0b144c152a3755d03b18b60, ab3ea6eac5f45669b091309f592c4ea324003053 or later

Affected products

ProductAffected versionsFixed in
Linux Linux6fe4220912d19152a26ce19713ab232f4263018d ≤ v < aaafd17d3f4be2c15539359a5b4bfa00237f687f, 6fe4220912d19152a26ce19713ab232f4263018d ≤ v < d664a3ce3a604231a0b144c152a3755d03b18b60, 6fe4220912d19152a26ce19713ab232f4263018d ≤ v < ab3ea6eac5f45669b091309f592c4ea324003053, 6.10aaafd17d3f4be2c15539359a5b4bfa00237f687f, d664a3ce3a604231a0b144c152a3755d03b18b60, ab3ea6eac5f45669b091309f592c4ea324003053

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.