PT-2025-52918 · Linux+3 · Linux Kernel+3
Yinhao
·
Published
2025-12-24
·
Updated
2026-05-22
·
CVE-2025-68725
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel where BPF test infrastructure could emit invalid GSO types to the stack. This issue stemmed from a fuzzer tool triggering a warning in
netif skb features() due to malformed GSO properties, specifically a missing gso type after setting gso segs and gso size. The issue was addressed with checks added in commit 121d57af308d to validate gso type in GSO handlers, initially to mitigate malicious packets combining a protocol with a non-matching gso type. The vulnerability is triggered when a BPF program pushes a packet to the loopback device via bpf clone redirect(). The gso features check() function returns feature flags via netif skb features().Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu