In the Linux kernel, the following vulnerability has been resolved:

fs/namespace: fix reference leak in grab_requested_mnt_ns

lookup_mnt_ns() already takes a reference on mnt_ns.
grab_requested_mnt_ns() doesn't need to take an extra reference.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00025.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
ba306daa7fa8ae0be5d64c215e9d43a88b4bc8bf affected < 4a16b2a0c1f033f95f5d0b98b9e40e8bf7c4c2c5
8ff97ade912dcfc5ac1783c4b8d615aacd26fd17 affected < fe256e59b8e7f126b2464ee32bd9fee131f0a883
78f0e33cd6c939a555aa80dbed2fec6b333a7660 affected < 7b6dcd9bfd869eee7693e45b1817dac8c56e5f86
Linux Linux unaffected
Version Status Constraints
6.12.59 affected < 6.12.61
6.17.9 affected < 6.17.11

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/4a16b2a0c1f033f95f5d0b98b9e40e8bf7c4c2c5 cve-icon cve-icon
https://git.kernel.org/stable/c/7b6dcd9bfd869eee7693e45b1817dac8c56e5f86 cve-icon cve-icon
https://git.kernel.org/stable/c/fe256e59b8e7f126b2464ee32bd9fee131f0a883 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025121643-CVE-2025-68300-ec22@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-68300 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-68300 cve-icon
History

Wed, 17 Dec 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 16 Dec 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: fs/namespace: fix reference leak in grab_requested_mnt_ns lookup_mnt_ns() already takes a reference on mnt_ns. grab_requested_mnt_ns() doesn't need to take an extra reference.
Title fs/namespace: fix reference leak in grab_requested_mnt_ns
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-12-16T15:06:18.941Z

Reserved: 2025-12-16T14:48:05.293Z

Link: CVE-2025-68300

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-16T16:16:09.513

Modified: 2025-12-18T15:08:06.237

Link: CVE-2025-68300

cve-icon Redhat

Severity : Low

Publid Date: 2025-12-16T00:00:00Z

Links: CVE-2025-68300 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.