CVE-2025-68378

CVE-2025-68378

published December 24, 2025

CVSS
—
EPSS
0%
Percentile
8.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix stackmap overflow check in __bpf_get_stackid()

Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()

when copying stack trace data. The issue occurs when the perf trace

contains more stack entries than the stack map bucket can hold,

leading to an out-of-bounds write in the bucket's data array.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00188 · 8.0th percentile
Published
2025-12-24T16:16Z
References (5)
EPSS history
Timeline
  • 24 DEC 10:33Z
    bpf: Fix stackmap overflow check in __bpf_get_stackid()
    cvelistv5