nbd

  1. CVE-2025-68366: Linux NBD Use-After-Free Race and Patch Guide

    A newly assigned Linux kernel vulnerability, tracked as CVE‑2025‑68366, affects the Network Block Device (NBD) driver and stems from a race that can produce a use‑after‑free when handling NBD control messages. The short technical summary is simple: code in nbd_genl_connect increments a...
  2. Linux NBD Kernel Hardening: CVE-2025-40080 Tightens Socket Validation

    The Linux kernel's Network Block Device (NBD) subsystem received a targeted hardening this week to restrict accepted socket types to TCP and UNIX stream sockets, closing a locally‑triggered vector that syzbot and fuzzers were beginning to abuse and preventing a range of unexpected socket types...