CVE-2025-68363

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The bpf skb check mtu helper in the Linux kernel does not properly validate the skb->transport header, potentially leading to issues when the BPF MTU CHK SEGS flag is used. Specifically, the transport header may not always be set, and the code does not check if it is set before accessing it. This can result in a warning message when CONFIG DEBUG NET is enabled, skb->gso size is set, and bpf prog test run is used. The issue is addressed by adding a check using skb transport header was set() before accessing skb->transport header.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.