SECUFOCUSNOW
Home›CVE index›CVE-2025-68285
Review reviewCritical

CVE-2025-68285

Linux

In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap or osdmap shortly after the initial map is received. Both ceph_monc_handle_map() and handle_one_map() install a new map immediately after freeing the old one kfree(monc->monmap); monc->monmap = monmap; ceph_osdmap_destroy(osdc->osdmap); osdc->osdmap = newmap; under client->monc.mutex and client->osdc.lock respectively, but because neither is taken in have_mon_and_osd_map() it...

CVSS
9.8
EPSS
0.52%
41.2% percentile
CISA KEV
Not listed
Published
2025.12.17
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.52%
Technical severityCVSS 9.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: libceph: fix potential use-after-free in have_mon_and_osd_map() The wait loop in __ceph_open_session() can race with the client receiving a new monmap or osdmap shortly after the initial map is received. Both ceph_monc_handle_map() and handle_one_map() install a new map immediately after freeing the old one kfree(monc->monmap); monc->monmap = monmap; ceph_osdmap_destroy(osdc->osdmap); osdc->osdmap = newmap; under client->monc.mutex and client->osdc.lock respectively, but because neither is taken in have_mon_and_osd_map() it...

Affected product and versions

Product
Linux
Affected versions
>= 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 < bb4910c5fd436701faf367e1b5476a5a6d2aff1c, >= 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 < 05ec43e9a9de67132dc8cd3b22afef001574947f, >= 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 < 7c8ccdc1714d9fabecd26e1be7db1771061acc6e, >= 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 < 183ad6e3b651e8fb0b66d6a2678f4b80bfbba092, >= 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 < e08021b3b56b2407f37b5fe47b654be80cc665fb, >= 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 < 3fc43120b22a3d4f1fbeff56a35ce2105b6a5683, >= 6822d00b5462e7a9dfa11dcc60cc25823a2107c5 < 076381c261374c587700b3accf410bdd2dba334e, >= 2.6.35
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2025-68285 — Linux | SECUFOCUS NOW