CVE-2025-68761
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
05/01/2026
Last modified:
05/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
hfs: fix potential use after free in hfs_correct_next_unused_CNID()<br />
<br />
This code calls hfs_bnode_put(node) which drops the refcount and then<br />
dreferences "node" on the next line. It&#39;s only safe to use "node"<br />
when we&#39;re holding a reference so flip these two lines around.



