CVE-2025-68188

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()

Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= cf1ef3f0719b4dcb74810ed507e2a2540f9811b4, < d3fe882ed33a1e45921764f4615bf82db79d8dcd; >= cf1ef3f0719b4dcb74810ed507e2a2540f9811b4, < e61dfd906ad027a4ade1f89e5fe706a3fcd52527; >= cf1ef3f0719b4dcb74810ed507e2a2540f9811b4, < bc2b881a0896c111c1041d8bb1f92a3b3873ace5; >= cf1ef3f0719b4dcb74810ed507e2a2540f9811b4, < 06da08d9355bf8e2070459bbedbe372ccc02cc0e; >= cf1ef3f0719b4dcb74810ed507e2a2540f9811b4, < b62a59c18b692f892dcb8109c1c2e653b2abc95c
LinuxLinux4.12

References

Timeline

Published
Dec 16, 2025
Last modified
Oct 30, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-681897.8In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix GEM free for imported dma-bufs Imported dma-bufs also havCVE-2025-68199.8A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability iCVE-2025-68190In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/atom: Check kcalloc() for WS buffer in amdgpu_atom_execute_tCVE-2025-68191In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uCVE-2025-681929.8In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup RaCVE-2025-68193In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Add devm release action to safely tear down CT When a buffCVE-2025-68194In the Linux kernel, the following vulnerability has been resolved: media: imon: make send_packet() more robust syzbot is reporting that iCVE-2025-68196In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Cache streams targeting link when performing LT automaCVE-2025-68197In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix null pointer dereference in bnxt_bs_trace_check_wrap() WiCVE-2025-68198In the Linux kernel, the following vulnerability has been resolved: crash: fix crashkernel resource shrink When crashkernel is configured CVE-2025-68199In the Linux kernel, the following vulnerability has been resolved: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty forCVE-2025-68209.8A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknow
CVE-2025-68188: Unscored | Vulnix