Use-After-Free Vulnerability in Linux Kernel's NVMe Controller
CVE-2025-68265

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 16 December 2025

What is CVE-2025-68265?

A use-after-free vulnerability exists in the Linux kernel related to the NVMe controller's admin request_queue. When a controller is torn down, stale references to the admin request_queue can remain active, potentially leading to unauthorized access. This issue requires careful management of the controller's lifecycle to prevent access to deallocated memory. The vulnerability has been addressed by ensuring that the admin request_queue is active only after all references to the controller have been released during teardown.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch