CVE-2025-68378bpf: Fix stackmap overflow check in __bpf_get_stackid()
- —Not scoredno CVSS score yet
- 0.22%Exploitation in 30 daysEPSS · top 87% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the perf trace contains more stack entries than the stack map bucket can hold, leading to an out-of-bounds write in the bucket's data array.
Timeline
ID reserved
By Linux
- 8 days later
· 8 days later
Published
- 10 months later
· 10 months later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Deferred.
- EPSS (exploitation in 30 days)
- 0.22% · top 87% of all CVEs (13 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected ee2a098851bfbe8bcdd964c0121f4246f00ff41e – < 03fe4c886667b3a09b9d6afc03bbc68afb35c82b
- affected ee2a098851bfbe8bcdd964c0121f4246f00ff41e – < d6028caa0ee39dccd005468adfa3223b92bd3ad3
- affected ee2a098851bfbe8bcdd964c0121f4246f00ff41e – < d1f424a77b6bd27b361737ed73df49a0158f1590
- affected ee2a098851bfbe8bcdd964c0121f4246f00ff41e – < 2a008f6de163279deffd488c1deab081bce5667c
- affected ee2a098851bfbe8bcdd964c0121f4246f00ff41e – < 4669a8db976c8cbd5427fe9945f12c5fa5168ff3
- affected ee2a098851bfbe8bcdd964c0121f4246f00ff41e – < 23f852daa4bab4d579110e034e4d513f7d490846
- affected 90805175a206f784b6a77f16f07b07f6803e286b
- affected 398ac11f4425d1e52aaf0d05d4fc90524e1a5b5e
- affected e750f78c4ed7cefbcefb9769b3b9e08033db39da
- affected 6c4f243b58f5362e983386488b2d563764c567af
- affected 5.10.110 – < 5.11
- affected 5.15.33 – < 5.16
- affected 5.16.19 – < 5.17
- affected 5.17.2 – < 5.18
- affected 5.18
- unaffected < 5.18
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.160 – ≤ 6.6.*
- unaffected 6.12.63 – ≤ 6.12.*
- unaffected 6.17.13 – ≤ 6.17.*
- unaffected 6.18.2 – ≤ 6.18.*
- unaffected 6.19 – ≤ *
References
References6
- https://git.kernel.org/stable/c/03fe4c886667b3a09b9d6afc03bbc68afb35c82b (opens in a new tab)
- https://git.kernel.org/stable/c/d6028caa0ee39dccd005468adfa3223b92bd3ad3 (opens in a new tab)
- https://git.kernel.org/stable/c/d1f424a77b6bd27b361737ed73df49a0158f1590 (opens in a new tab)
- https://git.kernel.org/stable/c/2a008f6de163279deffd488c1deab081bce5667c (opens in a new tab)
- https://git.kernel.org/stable/c/4669a8db976c8cbd5427fe9945f12c5fa5168ff3 (opens in a new tab)
- https://git.kernel.org/stable/c/23f852daa4bab4d579110e034e4d513f7d490846 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2025-205076 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2025-68378)Record last updated .