Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Yinhao

#45227of 53,624
5.5Total CVSS
Vulnerabilities · 1
PT-2025-52918
5.5
2025-12-24
Linux · Linux Kernel · CVE-2025-68725
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A flaw exists in the Linux kernel where BPF test infrastructure could emit invalid GSO types to the stack. This issue stemmed from a fuzzer tool triggering a warning in `netif skb features()` due to malformed GSO properties, specifically a missing `gso type` after setting `gso segs` and `gso size`. The issue was addressed with checks added in commit 121d57af308d to validate `gso type` in GSO handlers, initially to mitigate malicious packets combining a protocol with a non-matching `gso type`. The vulnerability is triggered when a BPF program pushes a packet to the loopback device via `bpf clone redirect()`. The `gso features check()` function returns feature flags via `netif skb features()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.