The Linux kernel NVMe driver contained a use-after-free vulnerability (CVE-2025-68265) related to the admin request_queue lifetime. Namespaces could access the controller's admin request_queue after the controller was torn down, resulting in stale references and a use-after-free condition. The fix involved moving the controller's 'put' operation to after all controller references have been released, preventing access to a freed request_queue. This vulnerability was detected via a KASAN slab-use-after-free report during blk_queue_enter execution.

Successful exploitation of this vulnerability could lead to memory corruption, potentially allowing an attacker with local privileges to cause a denial of service or escalate privileges by exploiting the use-after-free condition in the NVMe driver. The CVSS vector indicates local attack vector with low complexity and no user interaction, with high impact on confidentiality, integrity, and availability.

A fix for this vulnerability has been implemented in the Linux kernel by correcting the admin request_queue lifetime management in the NVMe driver. Users should apply the official kernel updates that include this fix. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor or Linux kernel advisory for the specific patched versions and apply updates accordingly.