CVE-2025-68372 nbd: defer config put in recv_work

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft CVEs CVE-2025-68372 and CVE-2025-68366 Published On February 18, 2026, Microsoft published information regarding two vulnerabilities, CVE-2025-68372 and CVE-2025-68366, both of which were published on December 24, 2025. These vulnerabilities are related to the NBD (Network Block Device) and involve configuration issues in specific functions. Affected systems may require updates to mitigate potential risks associated with these vulnerabilities. 2 sources 45