CVE-2025-68788

An information disclosure flaw was found in the Linux kernel's fsnotify subsystem. When monitoring a parent directory like /dev, users could observe ACCESS and MODIFY events on special files (such as /dev/null) that they cannot directly read. This creates a side-channel that could potentially be used to infer activity of other users on the system.

The practical impact of this side-channel is limited to inferring timing information about when other processes access special device files. No actual file content is exposed, and exploitation requires the attacker to have read access to the parent directory. The referenced research paper demonstrates theoretical attacks but real-world exploitation is constrained.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.