Review reviewCritical

CVE-2025-68359

Linux

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possible to incur into a double kfree() scenario when calling add_delayed_ref_head(). This could happen if the record was reported to already exist in the btrfs_qgroup_trace_extent_nolock() call, but then there was an error later on add_delayed_ref_head(). In this case, since add_delayed_ref_head() returned an error, the caller went to free the record. Since add_delayed_ref_head() couldn't set this kfree'd pointer to NU...

CVSS: 9.8
EPSS: 0.46%
CISA KEV: Not listed
Published: 2025.12.24

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.46%

Technical severityCVSS 9.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 6ef8fbce010421bf742b12b8f8f2b2d2ff154845 < 7617680769e3119dfb3b43a2b7c287ce2242211c, >= 6ef8fbce010421bf742b12b8f8f2b2d2ff154845 < 364685c4c2d9c9f4408d95451bcf42fdeebc3ebb, >= 6ef8fbce010421bf742b12b8f8f2b2d2ff154845 < 725e46298876a2cc1f1c3fb22ba69d29102c3ddf, >= 6.12
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: Not available