Vulnerability in Linux

CVE-2025-68744

In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]percpu_hash maps As [lru_,]percpu_hash maps support BPF_KPTR_{REF,PERCPU}, missing calls to 'bpf_obj_free_fields()' in 'pcpu_copy_value()' could cause the memory referenced by BPF_KPTR_{REF,PERCPU} fields to be held until the map gets freed. Fix this by calling 'bpf_obj_free_fields()' after 'copy_map_value[,_long]()' in 'pcpu_copy_value()'.

EPSS: 0.002 (5.9th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a, 6.4, 0

References