cve 2025 68744

About this tag
CVE-2025-68744 is a kernel-level vulnerability in eBPF maps, specifically affecting the percpu hash and LRU-percpu hash update path. The issue involves missing cleanup of special fields, such as kptr reference and per-CPU pointer fields, when a map value is updated. This can cause the kernel to retain memory referenced by BPF KPTR REF or PERCPU pointers until the entire map is destroyed, leading to potential memory leaks. A fix has been implemented to free these special fields during updates, preventing the unintended persistence of kernel-held objects. This vulnerability is relevant to Linux kernel security and eBPF subsystem stability.

  1. Kernel eBPF Fix for CVE-2025-68744: Freeing Special Fields to Prevent Memory Leaks

    A kernel-level fix landed this week to close a subtle eBPF map bug that could make kernel-held objects persist longer than intended: CVE-2025-68744 patches a missing cleanup in the BPF percpu hash and LRU-percpu hash update path so that special fields (notably kptr reference/per-CPU pointer...