CVE-2025-68262 describes a double-free vulnerability in the Linux kernel's crypto/zstd module. This flaw occurs because per-CPU ZSTD streams are incorrectly freed multiple times when different transform objects (tfms) are destroyed, rather than being managed at the module level. The vulnerability has no assigned CVSS score, but its FAUCET Risk Score is 7/100, indicating a low severity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Linux | Linux | 6.17CNA affecteddefault affected | |
| Linux | Linux | >= f5ad93ffb54119a8dc5e18f070624d4ead586969, < 48bc9da3c97c15f1ea24934bcb3b736acd30163d, >= f5ad93ffb54119a8dc5e18f070624d4ead586969, < dc0f4509b0ed5d82bef78e058db0ac4df04d0695, >= f5ad93ffb54119a8dc5e18f070624d4ead586969, < e983feaa79de1e46c9087fb9f02fedb0e5397ce6CNA affecteddefault unaffected |
CVSS data has not been published for this CVE.
Linux kernel (OEM) vulnerabilities
Apr 6, 2026Linux kernel (Raspberry Pi) vulnerabilities
Apr 1, 2026Linux kernel (Azure) vulnerabilities
Mar 25, 2026Linux kernel (Real-time) vulnerabilities
Mar 23, 2026Linux kernel vulnerabilities
Mar 17, 2026Linux kernel vulnerabilities
Mar 16, 2026crypto: zstd - fix double-free in per-CPU stream cleanup
Dec 16, 2025