Unrated severityNVD Advisory· Published Jan 5, 2026· Updated Apr 15, 2026
CVE-2025-68761
CVE-2025-68761
Description
In the Linux kernel, the following vulnerability has been resolved:
hfs: fix potential use after free in hfs_correct_next_unused_CNID()
This code calls hfs_bnode_put(node) which drops the refcount and then dreferences "node" on the next line. It's only safe to use "node" when we're holding a reference so flip these two lines around.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords3 versionspkg:linux/kernelpkg:rpm/opensuse/kernel-source&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/kernel-source-longterm&distro=openSUSE%20Tumbleweed
>= 6.18.0, < 6.18.2+ 2 more
- (no CPE)range: >= 6.18.0, < 6.18.2
- (no CPE)range: < 6.18.5-1.1
- (no CPE)range: < 6.18.16-1.1
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.