CVE-2025-68188
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 < bc2b881a0896c111c1041d8bb1f92a3b3873ace5 | affected |
| Linux | Linux | cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 < 06da08d9355bf8e2070459bbedbe372ccc02cc0e | affected |
| Linux | Linux | cf1ef3f0719b4dcb74810ed507e2a2540f9811b4 < b62a59c18b692f892dcb8109c1c2e653b2abc95c | affected |
| Linux | Linux | 4.12 | affected |
| Linux | Linux | 0 < 4.12 | unaffected |
| Linux | Linux | 6.12.58 <= 6.12.* | unaffected |
| Linux | Linux | 6.17.8 <= 6.17.* | unaffected |
| Linux | Linux | 6.18 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/bc2b881a0896c111c1041d8bb1f92a3b3873ace5
- https://git.kernel.org/stable/c/06da08d9355bf8e2070459bbedbe372ccc02cc0e
- https://git.kernel.org/stable/c/b62a59c18b692f892dcb8109c1c2e653b2abc95c
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.