HomeDefectsLIN1023-18267
Acknowledged

LIN1023-18267 : Security Advisory - linux - CVE-2025-68817

Created: Jan 13, 2026    Updated: Jan 19, 2026
Found In Version: 10.23.30.2
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency

Under high concurrency, A tree-connection object (tcon) is freed on
a disconnect path while another path still holds a reference and later
executes *_put()/write on it.