CVE-2025-68378
INFO
Priority: 0.00
BB Relevance:
0/100
Published: 2025-12-24
Modified: 2026-10-30
First seen: 2026-10-30
Status: pending_score
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the perf trace contains more stack entries than the stack map bucket can hold, leading to an out-of-bounds write in the bucket's data array.
Affected Software (15)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | ee2a098851bfbe8bcdd964c0121f4246f00ff41e < 03fe4c886667b3a09b9d6afc03bbc68afb35c82b |
| Linux | Linux | ee2a098851bfbe8bcdd964c0121f4246f00ff41e < d6028caa0ee39dccd005468adfa3223b92bd3ad3 |
| Linux | Linux | ee2a098851bfbe8bcdd964c0121f4246f00ff41e < d1f424a77b6bd27b361737ed73df49a0158f1590 |
| Linux | Linux | ee2a098851bfbe8bcdd964c0121f4246f00ff41e < 2a008f6de163279deffd488c1deab081bce5667c |
| Linux | Linux | ee2a098851bfbe8bcdd964c0121f4246f00ff41e < 4669a8db976c8cbd5427fe9945f12c5fa5168ff3 |
| Linux | Linux | ee2a098851bfbe8bcdd964c0121f4246f00ff41e < 23f852daa4bab4d579110e034e4d513f7d490846 |
| Linux | Linux | 90805175a206f784b6a77f16f07b07f6803e286b |
| Linux | Linux | 398ac11f4425d1e52aaf0d05d4fc90524e1a5b5e |
| Linux | Linux | e750f78c4ed7cefbcefb9769b3b9e08033db39da |
| Linux | Linux | 6c4f243b58f5362e983386488b2d563764c567af |
| Linux | Linux | 5.10.110 < 5.11 |
| Linux | Linux | 5.15.33 < 5.16 |
| Linux | Linux | 5.16.19 < 5.17 |
| Linux | Linux | 5.17.2 < 5.18 |
| Linux | Linux | 5.18 |