CVE-2025-68809

A flaw was found in ksmbd, a Linux kernel module that provides an SMB3 protocol server. A remote attacker can exploit a race condition due to inconsistent locking when multiple threads concurrently open, close, and delete the same file. This can lead to delete-on-close and pending-delete states being lost or observed inconsistently. Consequently, files may remain on disk after a delete-on-close operation or disappear while still in use, potentially causing data integrity issues or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.