CVE Explorer

CVE-2025-68263

In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits for a generic netlink reply using an ipc_msg_table_entry on the stack. The generic netlink handler (handle_generic_event()/handle_response()) fills entry->response under ipc_msg_table_lock, but ipc_msg_send_request() used to validate and free entry->response without holding the same lock. Under high concurrency this allows a race where handle_

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:afa24073fe900f23eeda33e94113f79d7c2a322affb9f1b66e8fcb02bdb3d540

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/smb/server/transport_ipc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"de85fb58f9967ba024bb08e0041613d37b57b4d1","status":"affected","version":"0626e6641f6b467447c81dd7678a69c66f7746cf","versionType":"git"},{"lessThan":"708a620b471a14466f1f52c90bf3f65ebdb31460","status":"affected","version":"0626e6641f6b467447c81dd7678a69c66f7746cf","versionType":"git"},{"lessThan":"5ac763713a1ef8f9a8bda1dbd81f0318d67baa4e","status":"affected","version":"0626e6641f6b4674…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/smb/server/transport_ipc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.15"},{"lessThan":"5.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.62","versionType":"semver"},{"le…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/metrics/0/cvssV3_1

Source references

6 source assertions

{"url":"https://git.kernel.org/stable/c/1fab1fa091f5aa97265648b53ea031deedd26235"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/5ac763713a1ef8f9a8bda1dbd81f0318d67baa4e"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/708a620b471a14466f1f52c90bf3f65ebdb31460"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/759c8c30cfa8706c518e56f67971b1f0932f4b9b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/8229c6ca50cea701e25a7ee25f48441b582ec5fa"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/de85fb58f9967ba024bb08e0041613d37b57b4d1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5f95f118cdef4c22a5c6886f4353cee6d240dfd8b0cac159d85bf6c6c7ef0c0d · sha256:a8bf5a2d0a8bb646… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer