CVE-2025-68378: bpf: Fix stackmap overflow check in __bpf_get_stackid()
In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix stackmap overflow check in bpfgetstackid()
Syzkaller reported a KASAN slab-out-of-bounds write in bpfgetstackid() when copying stack trace data. The issue occurs when the perf trace contains more stack entries than the stack map bucket can hold, leading to an out-of-bounds write in the bucket's data array.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68378?
CVE-2025-68378 is classified as a high severity vulnerability due to its potential for causing a stack overflow.
How do I fix CVE-2025-68378?
To fix CVE-2025-68378, update to the latest stable version of the Linux kernel that includes the patch for this vulnerability.
What are the potential impacts of CVE-2025-68378?
The potential impacts of CVE-2025-68378 include remote code execution or system crashes due to stack corruption.
Who is affected by CVE-2025-68378?
CVE-2025-68378 affects users of the Linux kernel running versions prior to the security fix.
What is the cause of CVE-2025-68378?
CVE-2025-68378 is caused by a stackmap overflow check error in the __bpf_get_stackid() function when handling performance trace data.