cve 2025 68742

CVE-2025-68742 is a Linux kernel vulnerability in the eBPF runtime that can lead to a null-pointer dereference during softirq processing. The issue arises when update_effective_progs fails and a program slot is replaced with a dummy program, allowing a concurrent softirq path to access an invalid stats pointer. A fix has been upstreamed that skips stats updates when the per-program stats pointer is NULL, resolving a Syzkaller-triggered fault scenario. This tag covers discussion of the vulnerability, its root cause, and the kernel patch addressing it.