---
id: CVE-2025-68378
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bpf: Fix stackmap overflow check in __bpf_get_stackid()

  Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()
  when copying stack trace data
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bpf: Fix stackmap overflow check in __bpf_get_stackid()

  Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()
  when copying stack trace data. The i…
severity: none
published: '2025-12-24'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T11:10:00.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68378'
references:
  - url: 'https://git.kernel.org/stable/c/23f852daa4bab4d579110e034e4d513f7d490846'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/2a008f6de163279deffd488c1deab081bce5667c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4669a8db976c8cbd5427fe9945f12c5fa5168ff3'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d1f424a77b6bd27b361737ed73df49a0158f1590'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d6028caa0ee39dccd005468adfa3223b92bd3ad3'
tags:
  - nvd
  - cve.org
epss: 0.00214
epssPercentile: 0.1171
ingestedAt: '2026-10-13T11:23:51.156Z'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e <
    d6028caa0ee39dccd005468adfa3223b92bd3ad3
  - >-
    Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e <
    d1f424a77b6bd27b361737ed73df49a0158f1590
  - >-
    Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e <
    2a008f6de163279deffd488c1deab081bce5667c
  - >-
    Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e <
    4669a8db976c8cbd5427fe9945f12c5fa5168ff3
  - >-
    Linux >= ee2a098851bfbe8bcdd964c0121f4246f00ff41e <
    23f852daa4bab4d579110e034e4d513f7d490846
  - Linux 90805175a206f784b6a77f16f07b07f6803e286b
  - Linux 398ac11f4425d1e52aaf0d05d4fc90524e1a5b5e
  - Linux e750f78c4ed7cefbcefb9769b3b9e08033db39da
  - Linux 6c4f243b58f5362e983386488b2d563764c567af
  - Linux >= 5.10.110 < 5.11
  - Linux >= 5.15.33 < 5.16
  - Linux >= 5.16.19 < 5.17
  - Linux >= 5.17.2 < 5.18
  - Linux 5.18
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix stackmap overflow check in __bpf_get_stackid()

Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid()
when copying stack trace data. The issue occurs when the perf trace
 contains more stack entries than the stack map bucket can hold,
 leading to an out-of-bounds write in the bucket's data array.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.