CVE-2025-68339

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a data race condition within the fore200e open() function, specifically related to the fore200e->available cell rate resource. This resource is shared across multiple Virtual Channel Connections (VCCs) and is accessed concurrently by functions like fore200e open(), fore200e close(), and fore200e change qos(). The issue arises when fore200e activate vcin() fails during the open process, leading to a restoration of reserved bandwidth to available cell rate without proper lock protection. This allows a read-modify-write race to occur, potentially resulting in incorrect bandwidth accounting. The rate mtx lock is not consistently held during operations on fore200e->available cell rate, creating a vulnerability in the error handling path of fore200e open().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.