CVE-2025-68263

A flaw was found in ksmbd, a component of the Linux kernel. A race condition exists in the Inter-Process Communication (IPC) message handling within the ipc_msg_send_request() function. This allows a remote, unauthenticated attacker to trigger a use-after-free vulnerability by sending specially crafted IPC messages. Successful exploitation could lead to memory corruption, potentially enabling arbitrary code execution or a denial of service on the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.