cve 2025 68379

About this tag
CVE-2025-68379 is a Linux kernel vulnerability in the RDMA soft-RoCE (rxe) driver that causes a null-pointer dereference during Shared Receive Queue (SRQ) resizing. When a resize operation fails and the modify operation is called twice, the internal queue pointer becomes NULL, leading to a kernel crash. The upstream stable patch addresses this race condition and lifecycle error. This vulnerability affects kernels with the in-tree rxe driver until the fix is applied. WindowsForum.com discussions cover the technical details, affected systems, and mitigation steps for CVE-2025-68379.

  1. CVE-2025-68379 Linux RDMA rxe SRQ Resize NULL Pointer Patch

    A Linux kernel vulnerability identified as CVE-2025-68379 has been published to fix a null‑pointer dereference in the RDMA soft‑RoCE driver (rxe) that can crash the kernel when Shared Receive Queue (SRQ) resizing fails and callers invoke the modify operation twice in succession. The upstream...