PT-2025-53008 · Linux+3 · Linux Kernel+3
Published
2025-12-24
·
Updated
2026-05-22
·
CVE-2025-68742
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw where an invalid memory access can occur following fault injection in the
update effective progs function. This issue arises when fault injection causes update effective progs to fail, leading to a change in the original program to dummy bpf prog.prog within purge effective progs. Subsequently, a softirq attempts to access members of dummy bpf prog.prog, triggering the invalid memory access. The call stack involved includes cgroup bpf detach, update effective progs, compute effective progs, bpf prog array alloc, purge effective progs, do softirq, cgroup bpf run filter skb, bpf prog run save cb, and bpf prog run. The issue specifically involves accessing prog->stats when stats is NULL.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu