PT-2025-51629 · Git+3 · Kernel+96

Published 2025-12-16 · Updated 2025-12-16 · CVE-2025-68216

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules, leading to issues such as test failures, kernel lockups when attaching BPF programs to module functions, and traffic disruption in critical modules like WireGuard when using fentry tracing. The issue arises from problems in the trampoline code for handling kernel module functions. Disabling trampoline attachments to kernel module functions on LoongArch serves as a temporary mitigation. The bpf selftests/module attach test consistently fails, and the handle fentry program fails to attach.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68216

Affected Products

Kernel

Linux

Linux-Allwinner-5.19

Linux-Aws

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.17

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Aws-Fips

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.2

Linux-Fips

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.17

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.17

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-Edge

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Nvidia-6.11

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.17

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.17

Linux-Oracle-6.5

Linux-Raspi

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.14

Linux-Riscv-6.17

Linux-Riscv-6.5

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

Linux-Xilinx

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68216.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-68216 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68216 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-68216 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-68216 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68216 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-68216 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-68216 · Vendor Advisory
• https://git.kernel.org/stable/c/677e6123e3d24adaa252697dc89740f2ac07664e · Note
• https://git.kernel.org/stable/c/44eb3849378be5f72b8be03edbacbdcd6f5eade4 · Note
• https://git.kernel.org/linus/677e6123e3d24adaa252697dc89740f2ac07664e · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note