PT-2025-52899 · Linux+3 · Linux Kernel+3

Published

2025-12-24

·

Updated

2026-05-11

·

CVE-2025-68363

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The bpf skb check mtu helper in the Linux kernel does not properly validate the skb->transport header, potentially leading to issues when the BPF MTU CHK SEGS flag is used. Specifically, the transport header may not always be set, and the code does not check if it is set before accessing it. This can result in a warning message when CONFIG DEBUG NET is enabled, skb->gso size is set, and bpf prog test run is used. The issue is addressed by adding a check using skb transport header was set() before accessing skb->transport header.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

AZL-73135
CVE-2025-68363
ECHO-1067-A582-BB32
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
OPENSUSE-SU-2026:10039-1
OPENSUSE-SU-2026:10301-1
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:0447-1
SUSE-SU-2026:0472-1
SUSE-SU-2026:0587-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8152-1
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu