PT-2025-51658 · Linux+3 · Linux Kernel+3

Published

2025-12-16

·

Updated

2026-05-07

·

CVE-2025-68245

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's netpoll functionality related to incorrect reference counting during cleanup operations. A previously committed fix (efa95b01da18, "netpoll: fix use after free") inadvertently ignored the reference count, leading to premature nullification of the dev->npinfo pointer during netpoll cleanup. This resulted in improper behavior and memory leaks when multiple netpolls were associated with the same network interface card (NIC). Specifically, the initial cleanup would clear dev->npinfo without decrementing the reference count, causing subsequent cleanup attempts to fail and leak memory associated with the netpoll instance and its associated skb pool. The issue was addressed by reverting the problematic commit and adding clarifying comments to ensure that npinfo cleanup only occurs when the reference count reaches zero.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68245
ECHO-4F1B-526E-753C
MGASA-2026-0017
MGASA-2026-0018
OESA-2026-1303
OESA-2026-1304
OESA-2026-1305
OPENSUSE-SU-2026:20287-1
SUSE-SU-2026:0447-1
SUSE-SU-2026:0472-1
SUSE-SU-2026:0473-1
SUSE-SU-2026:0587-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20555-1
SUSE-SU-2026:20599-1
SUSE-SU-2026:20615-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8096-1
USN-8096-2
USN-8096-3
USN-8096-4
USN-8096-5
USN-8100-1
USN-8116-1
USN-8125-1
USN-8126-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8165-1
USN-8243-1
USN-8261-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu