CVE-2025-68725

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where BPF test infrastructure could emit invalid GSO types to the stack. This issue stemmed from a fuzzer tool triggering a warning in netif skb features() due to malformed GSO properties, specifically a missing gso type after setting gso segs and gso size. The issue was addressed with checks added in commit 121d57af308d to validate gso type in GSO handlers, initially to mitigate malicious packets combining a protocol with a non-matching gso type. The vulnerability is triggered when a BPF program pushes a packet to the loopback device via bpf clone redirect(). The gso features check() function returns feature flags via netif skb features().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.