CVE-2025-68378: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the perf trace contains more stack entries than the stack map bucket can hold, leading to an out-of-bounds write in the bucket's data array.

Affected products

• Linux Linux: from 5.10.110, before 5.11 (fixed in 5.11); from 5.15.33, before 5.16 (fixed in 5.16); from 5.16.19, before 5.17 (fixed in 5.17); from 5.17.2, before 5.18 (fixed in 5.18); from 5.18, before 6.12.63 (fixed in 6.12.63); from 6.13, before 6.17.13 (fixed in 6.17.13); …

Published 2025-12-24. Last modified 2026-06-17.