CVE-2025-68355

Summary

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix exclusive map memory leak

When excl_prog_hash is 0 and excl_prog_hash_size is non-zero, the map also needs to be freed. Otherwise, the map memory will not be reclaimed, just like the memory leak problem reported by syzbot [1].

syzbot reported: BUG: memory leak backtrace (crc 7b9fb9b4): map_create+0x322/0x11e0 kernel/bpf/syscall.c:1512 __sys_bpf+0x3556/0x3610 kernel/bpf/syscall.c:6131

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxbaefdbdf6812e120c9fba9cfb101d3656f478026 < f0022551745d72fc0e7bc8601234d690dee2178daffected
LinuxLinuxbaefdbdf6812e120c9fba9cfb101d3656f478026 < 688b745401ab16e2e1a3b504863f0a45fd345638affected
LinuxLinux6.18affected
LinuxLinux0 < 6.18unaffected
LinuxLinux6.18.2 <= 6.18.*unaffected
LinuxLinux6.19 <= *unaffected

Weaknesses

References