CVE-2025-68742

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw where an invalid memory access can occur following fault injection in the update effective progs function. This issue arises when fault injection causes update effective progs to fail, leading to a change in the original program to dummy bpf prog.prog within purge effective progs. Subsequently, a softirq attempts to access members of dummy bpf prog.prog, triggering the invalid memory access. The call stack involved includes cgroup bpf detach, update effective progs, compute effective progs, bpf prog array alloc, purge effective progs, do softirq, cgroup bpf run filter skb, bpf prog run save cb, and bpf prog run. The issue specifically involves accessing prog->stats when stats is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.