CVE-2025-68805

A flaw was found in the Linux kernel's fuse subsystem. When an io-uring request is terminated before it has been committed, the request is not properly removed from the queue's list. This can lead to a dangling list entry, resulting in list corruption and use-after-free issues. A local attacker could potentially exploit this vulnerability to cause a denial of service or achieve arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.