Vulnerability in Linux

CVE-2025-68188

In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags.

EPSS: 0.002 (6.9th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions cf1ef3f0719b4dcb74810ed507e2a2540f9811b4, 4.12, 0

References