What is the CVSS score of CVE-2025-68761?

CVE-2025-68761 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Linux Kernel are affected by CVE-2025-68761?

A use-after-free vulnerability in the Linux kernel's HFS filesystem driver (CVE-2025-68761) can trigger kernel crashes when HFS volumes are mounted or processed.. A patch is available.

How to fix or mitigate CVE-2025-68761?

Within 24 hours, inventory Linux systems that mount or process HFS filesystems and assess whether HFS support is required for business operations. Within 7 days, implement kernel logging and monitoring to detect any memory corruption errors related to hfs_bnode operations and restrict HFS volume access where feasible. Within 30 days, disable HFS kernel module support on systems where legacy Apple filesystems are not operationally necessary, and establish a kernel patching schedule to apply vendor fixes immediately upon release.

Linux Kernel CVE-2025-68761

HIGH

2026-01-05 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Denial Of Service Linux Red Hat Suse

7.8

CVSS 3.1 · Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Severity by source

Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

5.8 MEDIUM

Requires mounting a crafted HFS volume with specific node-lifetime timing (AC:H) by a local user able to mount (PR:L); impact is primarily crash/DoS with limited memory-disclosure risk (C:L/I:L/A:H).

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N

SUSE

7.0 HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67).

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Jul 30, 2026 - 07:35 vuln.today

v3 (cvss_changed)

Analysis Updated

Jul 30, 2026 - 07:34 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 30, 2026 - 06:37 vuln.today

cvss_changed

CVSS changed

Jul 30, 2026 - 06:37 NVD

7.8 (HIGH)

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 05, 2026 - 10:15 nvd

N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

hfs: fix potential use after free in hfs_correct_next_unused_CNID()

This code calls hfs_bnode_put(node) which drops the refcount and then dreferences "node" on the next line. It's only safe to use "node" when we're holding a reference so flip these two lines around.

AnalysisAI

Memory corruption in the Linux kernel's HFS filesystem driver stems from a use-after-free in hfs_correct_next_unused_CNID(), where hfs_bnode_put() drops a b-tree node's refcount and the freed node is then dereferenced on the following line. The flaw affects systems that mount or process HFS (legacy Apple) volumes and can lead to a kernel crash or potential memory corruption. There is no public exploit identified at time of analysis, EPSS is negligible (0.03%), and it is not in CISA KEV; the tags characterize the practical impact as denial of service.

Technical ContextAI

HFS is the legacy Apple Hierarchical File System, supported in Linux via the fs/hfs driver. CNID (Catalog Node ID) management uses on-disk b-tree nodes that the kernel reference-counts with hfs_bnode_get()/hfs_bnode_put(). In hfs_correct_next_unused_CNID(), hfs_bnode_put(node) was called before the node was last dereferenced, so once the refcount reached zero and the node backing memory was freed, the subsequent access read freed memory. The root-cause class is CWE-416 (Use After Free); the upstream CWE field is unpopulated (N/A) in the source data, so CWE-416 is inferred from the description ('use after free ... drops the refcount and then dereferences').

Affected ProductsAI

The affected product is the Linux kernel's HFS filesystem implementation (fs/hfs). Exact vulnerable and fixed version ranges are not enumerated in the provided NVD data, which supplies only two stable-tree git commit references (https://git.kernel.org/stable/c/40a1e0142096dd7dd6cb5373841222b528698588 and https://git.kernel.org/stable/c/c105e76bb17cf4b55fe89c6ad4f6a0e3972b5b08) and no CPE strings; affected versions should be confirmed against your distribution's kernel and the stable trees these commits were backported to. No vendor advisory URL beyond the kernel.org commits is available in the source data.

RemediationAI

Upstream fix available (commit); released patched version not independently confirmed - apply the kernel update containing the two referenced stable commits (https://git.kernel.org/stable/c/40a1e0142096dd7dd6cb5373841222b528698588 and https://git.kernel.org/stable/c/c105e76bb17cf4b55fe89c6ad4f6a0e3972b5b08), or the corresponding fixed package from your distribution once it ships the backport. As a compensating control until patched, prevent mounting of untrusted HFS media: blacklist the hfs kernel module (e.g. install hfs /bin/true in modprobe.d) if HFS is not needed, which eliminates the attack surface at the cost of losing HFS read/write support; and disable automatic mounting of removable media (udisks/autofs policies) so an attacker cannot auto-trigger the driver by inserting a crafted disk, at the cost of manual mount workflows. Restrict physical and local access to systems that must retain HFS support.

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

SUSE

Severity: Important

Product	Status
openSUSE Tumbleweed	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected

CVE-2025-68761 vulnerability details – vuln.today

Back

Linux Kernel CVE-2025-68761

Severity by source

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Same technique Denial Of Service

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code