{"id":"CVE-2025-68378","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix stackmap overflow check in __bpf_get_stackid()\n\nSyzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()\nwhen copying stack trace data","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix stackmap overflow check in __bpf_get_stackid()\n\nSyzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()\nwhen copying stack trace data. The i…","severity":"none","published":"2025-12-24","updated":"2026-10-13","sourceUpdated":"2026-10-13T11:10:00.203","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68378","references":[{"url":"https://git.kernel.org/stable/c/23f852daa4bab4d579110e034e4d513f7d490846","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/2a008f6de163279deffd488c1deab081bce5667c","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4669a8db976c8cbd5427fe9945f12c5fa5168ff3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d1f424a77b6bd27b361737ed73df49a0158f1590","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d6028caa0ee39dccd005468adfa3223b92bd3ad3"}],"tags":["nvd","cve.org"],"epss":0.00214,"epssPercentile":0.1171,"ingestedAt":"2026-10-13T11:23:51.156Z","vendor":"Linux","product":"Linux","affected":["Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e < d6028caa0ee39dccd005468adfa3223b92bd3ad3","Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e < d1f424a77b6bd27b361737ed73df49a0158f1590","Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e < 2a008f6de163279deffd488c1deab081bce5667c","Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e < 4669a8db976c8cbd5427fe9945f12c5fa5168ff3","Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e < 23f852daa4bab4d579110e034e4d513f7d490846","Linux 90805175a206f784b6a77f16f07b07f6803e286b","Linux 398ac11f4425d1e52aaf0d05d4fc90524e1a5b5e","Linux e750f78c4ed7cefbcefb9769b3b9e08033db39da","Linux 6c4f243b58f5362e983386488b2d563764c567af","Linux >= 5.10.110 < 5.11","Linux >= 5.15.33 < 5.16","Linux >= 5.16.19 < 5.17","Linux >= 5.17.2 < 5.18","Linux 5.18"],"slug":"CVE-2025-68378","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix stackmap overflow check in __bpf_get_stackid()\n\nSyzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()\nwhen copying stack trace data. The issue occurs when the perf trace\n contains more stack entries than the stack map bucket can hold,\n leading to an out-of-bounds write in the bucket's data array.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}