Search: CVE-2025-68788

CVE-2025-68788 addresses a Linux kernel vulnerability in the fsnotify subsystem where ACCESS and MODIFY events were incorrectly generated for special files (e.g., /dev/null) to users who have read access to the parent directory but not to the file itself. This behavior could leak information about file access or modification times, creating a side-channel for potential information exfiltration. The fix aligns fsnotify event generation with the actual stat behavior for special files, preventing these events on read/write operations but still allowing them on explicit timestamp changes via utimensat().