Linux · Linux Kernel · CVE-2025-68725
**Name of the Vulnerable Software and Affected Versions**
Linux kernel (affected versions not specified)
**Description**
A flaw exists in the Linux kernel where BPF test infrastructure could emit invalid GSO types to the stack. This issue stemmed from a fuzzer tool triggering a warning in `netif skb features()` due to malformed GSO properties, specifically a missing `gso type` after setting `gso segs` and `gso size`. The issue was addressed with checks added in commit 121d57af308d to validate `gso type` in GSO handlers, initially to mitigate malicious packets combining a protocol with a non-matching `gso type`. The vulnerability is triggered when a BPF program pushes a packet to the loopback device via `bpf clone redirect()`. The `gso features check()` function returns feature flags via `netif skb features()`.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.