CVE-2025-68340

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the team device driver. Specifically, the issue arises when adding a port device that is already in an 'up' state. This can lead to modification of the team device header operations before the addition fails, potentially resulting in the private data of the device pointing to incorrect data structures. The sequence of commands involving 'ip link' can reproduce this issue. The resolution involves moving the team device type check change to the end of the team port add function to prevent irreversible type changes if subsequent checks fail, and preserving the original MTU assignment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.