CVE-2025-68265

CVE-2025-68265: Linux kernel vulnerability fixed in nvme: fix admin request_queue lifetime. The issue allowed namespaces to access a controller’s admin request_queue and could leave stale references after tearing down the controller, risking a use-after-free (KASAN) in blk_queue_enter. The patch ...

CVE-2025-68265 nvme: fix admin request_queue lifetime

In the Linux kernel, the following vulnerability has been resolved: nvme: fix admin requestqueue lifetime The namespaces can access the controller's admin requestqueue, and stale references on the namespaces may exist after tearing down the controller. Ensure the admin requestqueue is active by...

PT-2025-51678

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.13.2-ga1582f1a031e Description The Linux kernel had a flaw related to the admin request queue lifetime in the NVMe subsystem. Namespaces could access the controller's admin request queue, and stale references...