security_identifier

CVE-2025-68788

CVE identifier for a Linux kernel change that stops device files from generating file access and modify notification events.

Current clusters

build2 publishers

Graz researchers use file-change notifications to infer keystroke timing on Linux, plus other leaks on Android and Windows

Graz University researchers showed unprivileged apps can infer keystroke timing and browsing from file-change notifications on Linux, Android and Windows. The fixes shipped so far are partial, and the keystroke and KDE clickjacking flaws are still present.

Publishers:dev.tolwn.net

Reality

Evidence62
Adoption: Insufficient
Hype gap+5
Incentives: Insufficient
Confidence60

security1 publisher

Graz researchers turn OS file-change alerts into a monitor for typing and browsing

Graz University of Technology researchers used OS file-change alerts to identify sites another Windows user visited with 97.8% accuracy in Firefox. Every attack needs code already running on the device; on Android, an app that asks for no permissions is enough.

Publishers:securityweek.com

Reality

Evidence55
Adoption: Insufficient
Hype gap+15
Incentives: Insufficient
Confidence50