CVE-2025-68266: Linux kernel · bfs: Reconstruct file type when loading from disk
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in d0c5ec1f57d8fbb953f166a27d9d32473dc8f3e4 : update Linux kernel when convenient.
Data as of 10 Nov 2026, 15:02 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or none- Patch
- Available – fixed in d0c5ec1f57d8fbb953f166a27d9d32473dc8f3e4, aeccd6743ee4fdd1ab8cfcbb5b9a20b613418f6d, a9f626396bfe66f49b743601e862767928237cc0 +4
Exploitation evidence
Disclosed: evidence found.
CVE published 16 Dec 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in the Linux kernel commits listed under fixedVersions. Users should update their Linux kernel to a version including these commits to remediate the vulnerability. No additional mitigation actions are indicated.
Description
A vulnerability in the Linux kernel's BFS filesystem code could cause incorrect file type reconstruction when loading from disk due to corrupted mode or attributes fields. This issue arises because the S_IFMT bits of the inode mode can become invalid if the upper bits of the mode or attributes fields are corrupted. The fix involves ignoring the S_IFMT bits from the mode field loaded from disk and verifying that the attributes field is valid, as BFS supports only regular files and the root directory.
References
- git.kernel.org/stable/c/d0c5ec1f57d8fbb953f166a27d9d32473dc8f3e4 (opens in a new tab)
- git.kernel.org/stable/c/aeccd6743ee4fdd1ab8cfcbb5b9a20b613418f6d (opens in a new tab)
- git.kernel.org/stable/c/8f73336b75bd3457b6f9410f2a0601a238f32238 (opens in a new tab)
- git.kernel.org/stable/c/a9f626396bfe66f49b743601e862767928237cc0 (opens in a new tab)
- git.kernel.org/stable/c/77899444d46162aeb65f229590c26ba266864223 (opens in a new tab)
- git.kernel.org/stable/c/a8cb796e7e2cb7971311ba236922f5e7e1be77e6 (opens in a new tab)
- git.kernel.org/stable/c/34ab4c75588c07cca12884f2bf6b0347c7a13872 (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-019113.html (opens in a new tab)
- cert-portal.siemens.com/productcert/html/ssa-457936.html (opens in a new tab)