PT-2025-52755 · Linux+3 · Linux Kernel+3
Published
2025-12-23
·
Updated
2026-05-07
·
CVE-2025-68339
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a data race condition within the
fore200e open() function, specifically related to the fore200e->available cell rate resource. This resource is shared across multiple Virtual Channel Connections (VCCs) and is accessed concurrently by functions like fore200e open(), fore200e close(), and fore200e change qos(). The issue arises when fore200e activate vcin() fails during the open process, leading to a restoration of reserved bandwidth to available cell rate without proper lock protection. This allows a read-modify-write race to occur, potentially resulting in incorrect bandwidth accounting. The rate mtx lock is not consistently held during operations on fore200e->available cell rate, creating a vulnerability in the error handling path of fore200e open().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu