CVE-2025-68355

CVE-2025-68355

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
8.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix exclusive map memory leak

When excl_prog_hash is 0 and excl_prog_hash_size is non-zero, the map also

needs to be freed. Otherwise, the map memory will not be reclaimed, just

like the memory leak problem reported by syzbot [1].

syzbot reported:

BUG: memory leak

backtrace (crc 7b9fb9b4):

map_create+0x322/0x11e0 kernel/bpf/syscall.c:1512

__sys_bpf+0x3556/0x3610 kernel/bpf/syscall.c:6131

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00194 · 8.6th percentile
Published
2025-12-24T16:15Z
References (2)
EPSS history
Timeline
  • 24 DEC 10:32Z
    bpf: Fix exclusive map memory leak
    cvelistv5