CVE-2025-68363: bpf: Check skb->transport_header is set in bpf_skb_check_mtu
Published Dec 24, 2025
·Updated
bpf: Check skb->transportheader is set in bpfskbcheckmtu
Affected Software
3 affected componentsFixes available
Event History
Dec 24, 2025
CVE Published
via MITRE·10:32 AM
Data Sourced
via MITRE·10:32 AM
Description
Data Sourced
via NVD·11:15 AM
Description
Dec 25, 2025
Data Sourced
via Microsoft·01:05 AM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·09:05 AM
DescriptionSeverity
Updated
via Microsoft·09:05 AM
Affected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-68363?
CVE-2025-68363 has been classified with a severity rating that requires attention, as it relates to potential issues within the Linux kernel's BPF subsystem.
2
How do I fix CVE-2025-68363?
To fix CVE-2025-68363, ensure that your Linux kernel is updated to a version that includes the patch addressing this vulnerability.
3
What does CVE-2025-68363 affect?
CVE-2025-68363 affects the BPF subsystem of the Linux kernel, specifically in relation to the transport header checks.
4
What are the implications of CVE-2025-68363?
The implications of CVE-2025-68363 may include potential security risks if the BPF_MTU_CHK_SEGS flag is improperly handled.
5
Is CVE-2025-68363 present in all versions of the Linux kernel?
No, CVE-2025-68363 is not present in all versions; it only affects specific versions of the Linux kernel prior to the issuance of the protective patch.