CVE-2025-68317 is a vulnerability in the Linux kernel's io_uring subsystem related to the handling of chained notification contexts. The flaw involved sending zero-copy links to ubuf_info only for requests originating from the same context, which was not properly checked, leading to potential security issues. The vulnerability has been resolved by adding checks on chained notification contexts to ensure correct handling and prevent misuse. The CVSS 3.1 vector indicates local attack vector with low complexity, requiring low privileges and no user interaction, with high impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability could allow a local attacker with low privileges to cause significant confidentiality, integrity, and availability damage within the affected Linux kernel environment. The vulnerability affects the io_uring subsystem's notification context handling, potentially leading to unauthorized data access or system disruption.

The vulnerability has been resolved in the Linux kernel. However, no explicit patch links or affected versions are provided in the available data. Users should apply the official Linux kernel updates once available that address CVE-2025-68317. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.