Remote Denial of Service Vulnerability in Linux Kernel ksmbd Module
CVE-2025-68246

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 16 December 2025

What is CVE-2025-68246?

A vulnerability in the Linux kernel's ksmbd module allows for a remote denial of service when the per-IP connection limit is exceeded. Specifically, the error handling logic fails to close accepted sockets on connection rejection, leading to a situation where a single IP can leak multiple sockets for each rejected connection attempt. This bug, identified by ZeroPath, poses a risk of service interruption and requires attention to properly manage socket connections in the affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch