CVE-2025-68810

A flaw was found in the Kernel-based Virtual Machine (KVM) in the Linux kernel. A local attacker could exploit a use-after-free vulnerability by improperly disabling the KVM_MEM_GUEST_MEMFD flag on an existing memory slot that was initially bound to a guest memory file descriptor. This improper handling leads to KVM failing to unbind from the guest memory file descriptor instance, which can result in a use-after-free. Successful exploitation could lead to privilege escalation or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.