CVE-2025-68725: bpf: Do not let BPF test infra emit invalid GSO types to stack

Q: What is the severity of CVE-2025-68725?

The severity of CVE-2025-68725 is classified as medium due to potential issues with packet offloading in the Linux kernel.

Q: How do I fix CVE-2025-68725?

To fix CVE-2025-68725, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.

Q: What systems are affected by CVE-2025-68725?

CVE-2025-68725 affects all versions of the Linux kernel where the BPF test framework is utilized.

Q: Is CVE-2025-68725 remotely exploitable?

CVE-2025-68725 is not directly remotely exploitable; it requires local access and specific conditions to be met.

Q: What does CVE-2025-68725 impact in the Linux kernel?

CVE-2025-68725 impacts the BPF test infrastructure and can result in invalid GSO types being emitted, potentially causing network packet handling issues.

Published Dec 24, 2025

Updated

bpf: Do not let BPF test infra emit invalid GSO types to stack

Affected Software

208 affected componentsFixes available

Linux Linux kernel

Microsoft azl3 kernel 6.6.117.1-1

Microsoft azl3 kernel 6.6.121.1-1

Patch available

Microsoft cbl2 kernel 5.15.186.1-1

Patch available

Linux Linux kernel>=5.6<5.10.249

Linux Linux kernel>=5.11<5.15.199

Linux Linux kernel>=5.16<6.1.162

Linux Linux kernel>=6.2<6.6.122

Linux Linux kernel>=6.7<6.12.68

Linux Linux kernel>=6.13<6.18.2

debian/linux<6.1.162-1

6.1.162-1

debian/linux<6.12.69-1

6.12.69-1

debian/linux<6.18.3-1

6.18.3-1

ubuntu/linux-hwe-edge*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-azure*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-oem*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.15<5.15.0-1105.112~20.04.1

5.15.0-1105.112~20.04.1

ubuntu/linux-aws-5.8*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.15<5.15.0-1110.119~20.04.1

5.15.0-1110.119~20.04.1

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.15<5.15.0-1106.115~20.04.1

5.15.0-1106.115~20.04.1

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15<5.15.0-176.186~20.04.1

5.15.0-176.186~20.04.1

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm-5.15<5.15.0-1099.102~20.04.1

5.15.0-1099.102~20.04.1

ubuntu/linux-intel-5.13*

ubuntu/linux-intel-iotg-5.15<5.15.0-1100.106~20.04.1

5.15.0-1100.106~20.04.1

ubuntu/linux-lowlatency-hwe-5.15<5.15.0-175.185~20.04.1

5.15.0-175.185~20.04.1

ubuntu/linux-nvidia-tegra-5.15<5.15.0-1057.57~20.04.1

5.15.0-1057.57~20.04.1

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.15<5.15.0-1102.108~20.04.1

5.15.0-1102.108~20.04.1

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.15<5.15.0-1099.103~20.04.1

5.15.0-1099.103~20.04.1

ubuntu/linux-riscv-5.8*

ubuntu/linux<5.15.0-176.186

5.15.0-176.186

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws<5.15.0-1105.112

5.15.0-1105.112

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-aws-6.8<6.8.0-1057.60~22.04.1

6.8.0-1057.60~22.04.1

ubuntu/linux-azure<5.15.0-1110.119

5.15.0-1110.119

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5*

ubuntu/linux-azure-6.8<6.8.0-1059.65~22.04.1

6.8.0-1059.65~22.04.1

ubuntu/linux-azure-fde<5.15.0-1114.123

5.15.0-1114.123

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-azure-fde-6.8<6.8.0-1058.65~22.04.1

6.8.0-1058.65~22.04.1

ubuntu/linux-gcp<5.15.0-1105.114

5.15.0-1105.114

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5*

ubuntu/linux-gcp-6.8<6.8.0-1060.63~22.04.1

6.8.0-1060.63~22.04.1

ubuntu/linux-gke<5.15.0-1101.107

5.15.0-1101.107

ubuntu/linux-gkeop<5.15.0-1088.96

5.15.0-1088.96

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5*

ubuntu/linux-hwe-6.8<6.8.0-124.124~22.04.1

6.8.0-124.124~22.04.1

ubuntu/linux-ibm<5.15.0-1099.102

5.15.0-1099.102

ubuntu/linux-ibm-6.8<6.8.0-1055.56~22.04.1

6.8.0-1055.56~22.04.1

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg<5.15.0-1100.106

5.15.0-1100.106

ubuntu/linux-kvm<5.15.0-1097.102

5.15.0-1097.102

ubuntu/linux-lowlatency<5.15.0-175.185

5.15.0-175.185

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5*

ubuntu/linux-lowlatency-hwe-6.8<6.8.0-117.117.1~22.04.1

6.8.0-117.117.1~22.04.1

ubuntu/linux-nvidia<5.15.0-1100.101

5.15.0-1100.101

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5*

ubuntu/linux-nvidia-6.8<6.8.0-1054.57~22.04.1

6.8.0-1054.57~22.04.1

ubuntu/linux-nvidia-tegra<5.15.0-1057.57

5.15.0-1057.57

ubuntu/linux-nvidia-tegra-igx<5.15.0-1046.46

5.15.0-1046.46

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5*

ubuntu/linux-oracle<5.15.0-1102.108

5.15.0-1102.108

ubuntu/linux-oracle-6.5*

ubuntu/linux-oracle-6.8<6.8.0-1054.55~22.04.1

6.8.0-1054.55~22.04.1

ubuntu/linux-raspi<5.15.0-1099.102

5.15.0-1099.102

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5*

ubuntu/linux-riscv-6.8<6.8.0-117.117~22.04.1

6.8.0-117.117~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5*

ubuntu/linux-xilinx-zynqmp<5.15.0-1070.74

5.15.0-1070.74

ubuntu/linux-bluefield<5.15.0-1089.91

5.15.0-1089.91

ubuntu/linux-intel-iot-realtime<5.15.0-1097.99

5.15.0-1097.99

ubuntu/linux-realtime<5.15.0-1104.113

5.15.0-1104.113

ubuntu/linux-realtime-6.8<6.8.1-1051.52~22.04.1

6.8.1-1051.52~22.04.1

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips<5.15.0-1105.112+fips1

5.15.0-1105.112+fips1

ubuntu/linux-azure-fips<5.15.0-1110.119+fips1

5.15.0-1110.119+fips1

ubuntu/linux-fips<5.15.0-176.186+fips1

5.15.0-176.186+fips1

ubuntu/linux-gcp-fips<5.15.0-1105.114+fips1

5.15.0-1105.114+fips1

ubuntu/linux<6.8.0-117.117

6.8.0-117.117

ubuntu/linux-aws<6.8.0-1055.58

6.8.0-1055.58

ubuntu/linux-aws-6.14*

ubuntu/linux-aws-6.17<6.17.0-1012.12~24.04.1

6.17.0-1012.12~24.04.1

ubuntu/linux-azure<6.8.0-1056.62

6.8.0-1056.62

ubuntu/linux-azure-6.11*

ubuntu/linux-azure-6.14*

ubuntu/linux-azure-6.17<6.17.0-1013.13~24.04.1

6.17.0-1013.13~24.04.1

ubuntu/linux-azure-fde<6.8.0-1058.65

6.8.0-1058.65

ubuntu/linux-azure-fde-6.14*

ubuntu/linux-azure-nvidia<6.8.0-1039.42

6.8.0-1039.42

ubuntu/linux-azure-nvidia-6.14*

ubuntu/linux-gcp<6.8.0-1058.61

6.8.0-1058.61

ubuntu/linux-gcp-6.11*

ubuntu/linux-gcp-6.14*

ubuntu/linux-gcp-6.17<6.17.0-1012.12~24.04.1

6.17.0-1012.12~24.04.1

ubuntu/linux-gke<6.8.0-1054.60

6.8.0-1054.60

ubuntu/linux-gkeop<6.8.0-1041.44

6.8.0-1041.44

ubuntu/linux-hwe-6.11*

ubuntu/linux-hwe-6.14*

ubuntu/linux-hwe-6.17<6.17.0-22.22~24.04.1

6.17.0-22.22~24.04.1

ubuntu/linux-ibm<6.8.0-1055.56

6.8.0-1055.56

ubuntu/linux-lowlatency<6.8.0-117.117.1

6.8.0-117.117.1

ubuntu/linux-lowlatency-hwe-6.11*

ubuntu/linux-nvidia<6.8.0-1054.57

6.8.0-1054.57

ubuntu/linux-nvidia-6.11*

ubuntu/linux-nvidia-6.17<6.17.0-1018.18

6.17.0-1018.18

ubuntu/linux-nvidia-lowlatency<6.8.0-1054.57.1

6.8.0-1054.57.1

ubuntu/linux-nvidia-tegra<6.8.0-1024.24

6.8.0-1024.24

ubuntu/linux-oem-6.11*

ubuntu/linux-oem-6.14*

ubuntu/linux-oem-6.17<6.17.0-1020.20

6.17.0-1020.20

ubuntu/linux-oem-6.8*

ubuntu/linux-oracle<6.8.0-1054.55

6.8.0-1054.55

ubuntu/linux-oracle-6.14*

ubuntu/linux-oracle-6.17<6.17.0-1011.11~24.04.1

6.17.0-1011.11~24.04.1

ubuntu/linux-raspi<6.8.0-1056.60

6.8.0-1056.60

ubuntu/linux-raspi-realtime*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-6.14*

ubuntu/linux-riscv-6.17<6.17.0-22.22.1~24.04.1

6.17.0-22.22.1~24.04.1

ubuntu/linux-xilinx<6.8.0-1032.33

6.8.0-1032.33

ubuntu/linux-bluefield<6.8.0-1022.26

6.8.0-1022.26

ubuntu/linux-raspi-realtime<6.8.0-2045.46

6.8.0-2045.46

ubuntu/linux-realtime<6.8.1-1051.52

6.8.1-1051.52

ubuntu/linux-realtime-6.14*

ubuntu/linux-realtime-6.17<6.17.0-1010.11~24.04.1

6.17.0-1010.11~24.04.1

ubuntu/linux-aws-fips<6.8.0-1055.58+fips1

6.8.0-1055.58+fips1

ubuntu/linux-azure-fips<6.8.0-1059.65+fips1

6.8.0-1059.65+fips1

ubuntu/linux-fips<6.8.0-116.116+fips1

6.8.0-116.116+fips1

ubuntu/linux-gcp-fips<6.8.0-1058.61+fips1

6.8.0-1058.61+fips1

ubuntu/linux<6.17.0-22.22

6.17.0-22.22

ubuntu/linux-aws<6.17.0-1012.12

6.17.0-1012.12

ubuntu/linux-azure<6.17.0-1013.13

6.17.0-1013.13

ubuntu/linux-azure-fde*

ubuntu/linux-gcp<6.17.0-1012.12

6.17.0-1012.12

ubuntu/linux-oracle<6.17.0-1011.11

6.17.0-1011.11

ubuntu/linux-raspi<6.17.0-1013.13

6.17.0-1013.13

ubuntu/linux-realtime<6.17.0-1010.11

6.17.0-1010.11

ubuntu/linux-riscv<6.17.0-22.22.1

6.17.0-22.22.1

ubuntu/linux-vmware*

linux/kernel>=5.6.0<5.10.249

5.10.249

linux/kernel>=5.11.0<5.15.199

5.15.199

linux/kernel>=5.16.0<6.1.162

6.1.162

linux/kernel>=6.2.0<6.6.122

6.6.122

linux/kernel>=6.7.0<6.12.68

6.12.68

linux/kernel>=6.13.0<6.18.2

6.18.2

debian/linux

6.1.176-16.1.190-16.12.107-16.12.116-17.2.15-17.3.4-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.162-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.12.69-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.18.3-1
Upgrade
Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1105.112~20.04.1
Upgrade
Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1110.119~20.04.1
Upgrade
Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1106.115~20.04.1
Upgrade
Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-176.186~20.04.1
Upgrade
Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1099.102~20.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1100.106~20.04.1
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-175.185~20.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.57~20.04.1
Upgrade
Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.108~20.04.1
Upgrade
Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0-1099.103~20.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 5.15.0-176.186
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 5.15.0-1105.112
Upgrade
Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1057.60~22.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 5.15.0-1110.119
Upgrade
Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1059.65~22.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 5.15.0-1114.123
Upgrade
Upgrade ubuntu/linux-azure-fde-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1058.65~22.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 5.15.0-1105.114
Upgrade
Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1060.63~22.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 5.15.0-1101.107
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 5.15.0-1088.96
Upgrade
Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-124.124~22.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 5.15.0-1099.102
Upgrade
Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1055.56~22.04.1
Upgrade
Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.
Fixed in 5.15.0-1100.106
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 5.15.0-1097.102
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-175.185
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-117.117.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 5.15.0-1100.101
Upgrade
Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1054.57~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 5.15.0-1057.57
Upgrade
Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.
Fixed in 5.15.0-1046.46
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 5.15.0-1102.108
Upgrade
Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-1054.55~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 5.15.0-1099.102
Upgrade
Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.0-117.117~22.04.1
Upgrade
Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.
Fixed in 5.15.0-1070.74
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 5.15.0-1089.91
Upgrade
Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1097.99
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 5.15.0-1104.113
Upgrade
Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.
Fixed in 6.8.1-1051.52~22.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1105.112+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1110.119+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-176.186+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 5.15.0-1105.114+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.8.0-117.117
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.8.0-1055.58
Upgrade
Upgrade ubuntu/linux-aws-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1012.12~24.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.8.0-1056.62
Upgrade
Upgrade ubuntu/linux-azure-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1013.13~24.04.1
Upgrade
Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.
Fixed in 6.8.0-1058.65
Upgrade
Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1039.42
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.8.0-1058.61
Upgrade
Upgrade ubuntu/linux-gcp-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1012.12~24.04.1
Upgrade
Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.
Fixed in 6.8.0-1054.60
Upgrade
Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.
Fixed in 6.8.0-1041.44
Upgrade
Upgrade ubuntu/linux-hwe-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-22.22~24.04.1
Upgrade
Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.
Fixed in 6.8.0-1055.56
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-117.117.1
Upgrade
Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.
Fixed in 6.8.0-1054.57
Upgrade
Upgrade ubuntu/linux-nvidia-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1018.18
Upgrade
Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.
Fixed in 6.8.0-1054.57.1
Upgrade
Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.
Fixed in 6.8.0-1024.24
Upgrade
Upgrade ubuntu/linux-oem-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1020.20
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.8.0-1054.55
Upgrade
Upgrade ubuntu/linux-oracle-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1011.11~24.04.1
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.8.0-1056.60
Upgrade
Upgrade ubuntu/linux-riscv-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-22.22.1~24.04.1
Upgrade
Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.
Fixed in 6.8.0-1032.33
Upgrade
Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.
Fixed in 6.8.0-1022.26
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2045.46
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.8.1-1051.52
Upgrade
Upgrade ubuntu/linux-realtime-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1010.11~24.04.1
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1055.58+fips1
Upgrade
Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1059.65+fips1
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-116.116+fips1
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 6.8.0-1058.61+fips1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 6.17.0-22.22
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 6.17.0-1012.12
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 6.17.0-1013.13
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 6.17.0-1012.12
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 6.17.0-1011.11
Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.17.0-1013.13
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.17.0-1010.11
Upgrade
Upgrade ubuntu/linux-riscv to a version that resolves this vulnerability.
Fixed in 6.17.0-22.22.1
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.10.249
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 5.15.199
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.162
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.122
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.12.68
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.18.2
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.116-1Fixed in 7.2.15-1Fixed in 7.3.4-1
Compensating control
Reject packets with invalid GSO types in bpf_clone_redirect() before they are emitted to the network stack.

Event History

Dec 24, 2025

CVE Published

via MITRE·10:33 AM

Data Sourced

via MITRE·10:33 AM

Description

Data Sourced

via OSV·10:33 AM

DescriptionAffected Software

Data Sourced

via NVD·11:16 AM

RemedyDescriptionSeverityAffected Software

Dec 25, 2025

Data Sourced

via Microsoft·01:04 AM

DescriptionSeverityWeaknessAffected Software

Nov 11, 2026

Data Sourced

via OSV·09:39 AM

Severity

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2025-68725?

The severity of CVE-2025-68725 is classified as medium due to potential issues with packet offloading in the Linux kernel.

How do I fix CVE-2025-68725?

To fix CVE-2025-68725, update your Linux kernel to the latest stable version that includes the patch for this vulnerability.

What systems are affected by CVE-2025-68725?

CVE-2025-68725 affects all versions of the Linux kernel where the BPF test framework is utilized.

Is CVE-2025-68725 remotely exploitable?

CVE-2025-68725 is not directly remotely exploitable; it requires local access and specific conditions to be met.

What does CVE-2025-68725 impact in the Linux kernel?

CVE-2025-68725 impacts the BPF test infrastructure and can result in invalid GSO types being emitted, potentially causing network packet handling issues.

CVE-2025-68725: bpf: Do not let BPF test infra emit invalid GSO types to stack

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-68725?

How do I fix CVE-2025-68725?

What systems are affected by CVE-2025-68725?

Is CVE-2025-68725 remotely exploitable?

What does CVE-2025-68725 impact in the Linux kernel?

Company

Resources

Contact