Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Yinhao

#36018of 56,329
7.8Total CVSS
Vulnerabilities · 1
PT-2025-52918
7.8
2025-10-20
Linux · Linux Kernel · CVE-2025-68725
**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A flaw exists in the Linux kernel where BPF test infrastructure could emit invalid GSO types to the stack. This issue stemmed from a fuzzer tool triggering a warning in `netif skb features()` due to malformed GSO properties, specifically a missing `gso type` after setting `gso segs` and `gso size`. The issue was addressed with checks added in commit 121d57af308d to validate `gso type` in GSO handlers, initially to mitigate malicious packets combining a protocol with a non-matching `gso type`. The vulnerability is triggered when a BPF program pushes a packet to the loopback device via `bpf clone redirect()`. The `gso features check()` function returns feature flags via `netif skb features()`. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.