Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68821

In the Linux kernel, the following vulnerability has been resolved: fuse: fix readahead reclaim deadlock Commit e26ee4efbc79 ("fuse: allocate ff->release_args only if release is needed") skips allocating ff->release_args if the server does not implement open. However in doing so, fuse_prepare_release() now skips grabbing the reference on the inode, which makes it possible for an inode to be evicted from the dcache while there are inflight readahead requests. This causes a deadlock if the serve
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:370a69e0f0ca00ed422082fbf2ff969615ae80f6cdff9363363580d6e8f558b8
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/fuse/file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"semver"},{"lessThanOrEqual":"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/fuse/file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"cbbf3f1bb9f834bb2acbb61ddca74363456e19cd","status":"affected","version":"a39f70d63f4373a598820d9491719e44cd60afe9","versionType":"git"},{"lessThan":"4703bc0e8cd3409acb1476a70cb5b7ff943cf39a","status":"affected","version":"7d38aa079ed859b73f4460aab89c7619b04963b8","versionType":"git"},{"lessThan":"cf74785c00b8b1c0c4a9dd74bfa9c22d62e2d99f","status":"affected","version":"c7ec75f3cbf73bd46f479f7d6942585…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/fuse/file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.120","versionType":"semver"},{"lessThanOrEqual":"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/fuse/file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"cbbf3f1bb9f834bb2acbb61ddca74363456e19cd","status":"affected","version":"a39f70d63f4373a598820d9491719e44cd60afe9","versionType":"git"},{"lessThan":"4703bc0e8cd3409acb1476a70cb5b7ff943cf39a","status":"affected","version":"7d38aa079ed859b73f4460aab89c7619b04963b8","versionType":"git"},{"lessThan":"cf74785c00b8b1c0c4a9dd74bfa9c22d62e2d99f","status":"affected","version":"c7ec75f3cbf73bd46f479f7d6942585…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/affected/0

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/4703bc0e8cd3409acb1476a70cb5b7ff943cf39a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/bd5603eaae0aabf527bfb3ce1bb07e979ce5bd50"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/cbbf3f1bb9f834bb2acbb61ddca74363456e19cd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/cf74785c00b8b1c0c4a9dd74bfa9c22d62e2d99f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/e0d6de83a4cc22bbac72713f3a58121af36cc411"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/fbba8b00bbe4e4f958a2b0654cc1219a7e6597f6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:965c9114581124451265d85e27d906e2db5004a469420c70d404be9d3e783ec7 · sha256:8e95dfdaa663bfd3… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer