CVE-2025-68378
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the perf trace contains more stack entries than the stack map bucket can hold, leading to an out-of-bounds write in the bucket's data array.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Deferred
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2025-12-24 11:16:01.390000
Last modified
2026-10-30 13:18:22.017000
View original CVE JSON
{
"id": "CVE-2025-68378",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-12-24T11:16:01.390",
"lastModified": "2026-10-30T13:18:22.017",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix stackmap overflow check in __bpf_get_stackid()\n\nSyzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()\nwhen copying stack trace data. The issue occurs when the perf trace\n contains more stack entries than the stack map bucket can hold,\n leading to an out-of-bounds write in the bucket's data array."
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbpf: Corrección de la comprobación de desbordamiento de stackmap en __bpf_get_stackid()\n\nSyzkaller informó de una escritura fuera de límites de slab de KASAN en __bpf_get_stackid() al copiar datos de traza de pila. El problema ocurre cuando la traza de perf contiene más entradas de pila de las que puede contener el cubo del mapa de pila, lo que lleva a una escritura fuera de límites en el array de datos del cubo."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"kernel/bpf/stackmap.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "ee2a098851bfbe8bcdd964c0121f4246f00ff41e",
"lessThan": "03fe4c886667b3a09b9d6afc03bbc68afb35c82b",
"versionType": "git",
"status": "affected"
},
{
"version": "ee2a098851bfbe8bcdd964c0121f4246f00ff41e",
"lessThan": "d6028caa0ee39dccd005468adfa3223b92bd3ad3",
"versionType": "git",
"status": "affected"
},
{
"version": "ee2a098851bfbe8bcdd964c0121f4246f00ff41e",
"lessThan": "d1f424a77b6bd27b361737ed73df49a0158f1590",
"versionType": "git",
"status": "affected"
},
{
"version": "ee2a098851bfbe8bcdd964c0121f4246f00ff41e",
"lessThan": "2a008f6de163279deffd488c1deab081bce5667c",
"versionType": "git",
"status": "affected"
},
{
"version": "ee2a098851bfbe8bcdd964c0121f4246f00ff41e",
"lessThan": "4669a8db976c8cbd5427fe9945f12c5fa5168ff3",
"versionType": "git",
"status": "affected"
},
{
"version": "ee2a098851bfbe8bcdd964c0121f4246f00ff41e",
"lessThan": "23f852daa4bab4d579110e034e4d513f7d490846",
"versionType": "git",
"status": "affected"
},
{
"version": "90805175a206f784b6a77f16f07b07f6803e286b",
"versionType": "git",
"status": "affected"
},
{
"version": "398ac11f4425d1e52aaf0d05d4fc90524e1a5b5e",
"versionType": "git",
"status": "affected"
},
{
"version": "e750f78c4ed7cefbcefb9769b3b9e08033db39da",
"versionType": "git",
"status": "affected"
},
{
"version": "6c4f243b58f5362e983386488b2d563764c567af",
"versionType": "git",
"status": "affected"
},
{
"version": "5.10.110",
"lessThan": "5.11",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.15.33",
"lessThan": "5.16",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.16.19",
"lessThan": "5.17",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.17.2",
"lessThan": "5.18",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"kernel/bpf/stackmap.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.18",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.18",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.191",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.160",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.63",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.17.13",
"lessThanOrEqual": "6.17.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18.2",
"lessThanOrEqual": "6.18.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.19",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/03fe4c886667b3a09b9d6afc03bbc68afb35c82b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/23f852daa4bab4d579110e034e4d513f7d490846",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/2a008f6de163279deffd488c1deab081bce5667c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/4669a8db976c8cbd5427fe9945f12c5fa5168ff3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d1f424a77b6bd27b361737ed73df49a0158f1590",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d6028caa0ee39dccd005468adfa3223b92bd3ad3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}