Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-68378

bpf: Fix stackmap overflow check in __bpf_get_stackid()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the perf trace contains more stack entries than the stack map bucket can hold, leading to an out-of-bounds write in the bucket's data array.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ee2a098851bfbe8bcdd964c0121f4246f00ff41e to < 03fe4c886667b3a09b9d6afc03bbc68afb35c82baffected
  • ee2a098851bfbe8bcdd964c0121f4246f00ff41e to < d6028caa0ee39dccd005468adfa3223b92bd3ad3affected
  • ee2a098851bfbe8bcdd964c0121f4246f00ff41e to < d1f424a77b6bd27b361737ed73df49a0158f1590affected
  • ee2a098851bfbe8bcdd964c0121f4246f00ff41e to < 2a008f6de163279deffd488c1deab081bce5667caffected
  • ee2a098851bfbe8bcdd964c0121f4246f00ff41e to < 4669a8db976c8cbd5427fe9945f12c5fa5168ff3affected
  • ee2a098851bfbe8bcdd964c0121f4246f00ff41e to < 23f852daa4bab4d579110e034e4d513f7d490846affected
  • 90805175a206f784b6a77f16f07b07f6803e286baffected
  • 398ac11f4425d1e52aaf0d05d4fc90524e1a5b5eaffected
  • e750f78c4ed7cefbcefb9769b3b9e08033db39daaffected
  • 6c4f243b58f5362e983386488b2d563764c567afaffected
  • 5.10.110 to < 5.11affected
  • 5.15.33 to < 5.16affected
  • 5.16.19 to < 5.17affected
  • 5.17.2 to < 5.18affected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.63 to ≤ 6.12.*unaffected
  • 6.17.13 to ≤ 6.17.*unaffected
  • 6.18.2 to ≤ 6.18.*unaffected
  • 6.19 to ≤ *unaffected

References