CVE-2025-68800

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-rc1-custom-g1a3d6d7cd014

Description The Linux kernel contained a use-after-free issue within the mlxsw spectrum mr module. A missing mutex acquisition during multicast route deletion could lead to this condition when updating multicast route statistics. The issue was identified through KASAN (Kernel Address Sanitizer) detecting a slab-use-after-free in the mlxsw sp mr stats update function. The root cause was a race condition where a list entry could be deleted while being traversed for statistics updates.

Recommendations Update to version 6.18.0-rc1-custom-g1a3d6d7cd014 or a later version to address this issue.