PT-2025-52757 · Linux+3 · Linux Kernel+3
CVE-2025-68341
·
Published
2025-11-19
·
Updated
2026-04-06
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A race condition exists within the veth module when handling XDP (eXpress Data Path) with no direct return frames. Specifically, the issue arises from concurrent calls to
veth pool() in threaded-NAPI mode, potentially leading to incorrect handling of BPF (Berkeley Packet Filter) net contexts stored in the current task structure. The problem stems from the nested nature of xdp clear return frame no direct() and the potential for another CPU to initiate a new NAPI instance while a previous instance is still executing. This race condition can occur when exiting NAPI and starting a new NAPI instance, both utilizing the same BPF net context.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu