CVE-2025-68200: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-68200DEBIAN-CVE-2025-68200
Published 16-12-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2025-68200 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.1% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 40 · Related 37
DLA-4436-1MGASA-2026-0017MGASA-2026-0018OPENSUSE-SU-2026:20287-1SUSE-SU-2026:0447-1SUSE-SU-2026:0472-1

Timeline

  1. 16-12-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Add bpf_prog_run_data_pointers() syzbot found that cls_bpf_classify() is able to change tc_skb_cb(skb)->drop_reason triggering a warning in sk_skb_reason_drop(). WARNING: CPU: 0 PID: 5965 at net/core/skbuff.c:1192 __sk_skb_reason_drop net/core/skbuff.c:1189 [inline] WARNING: CPU: 0 PID: 5965 at net/core/skbuff.c:1192 sk_skb_reason_drop+0x76/0x170 net/core/skbuff.c:1214 struct tc_skb_cb has been added in commit ec624fe740b4 ("net/sched: Extend qdisc control block with tc control block"), which added a wrong interaction with db58ba459202 ("bpf: wire in data and data_end for cls_act_bpf"). drop_reason was added later. Add bpf_prog_run_data_pointers() helper to save/restore the net_sched storage colliding with BPF data_meta/data_end.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

0.00 pp

From 0.21% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu141 products
  • linux< 5.15.0-173.183 | < 6.8.0-106.106 | < 6.17.0-14.14
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1103.110 | < 6.8.0-1050.53 | < 6.17.0-1007.7
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.9-1
Linux1 product
  • linux≥ 0d76daf2013ce1da20eab5e26bd81d983e1c18fb, < c4cdd143c35974a2cedd000fa9eb3accc3023b20 | ≥ ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 5e149d8a8e732126fb6014efd60075cf63a73f91 | ≥ ec624fe740b416fb68d536b37fb8eef46f90b5c2, < baa61dcaa50b7141048c8d2aede7fe9ed8f21d11 | ≥ ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 6392e5f4b1a3cce10e828309baf35d22abd3457d | ≥ ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 8dd2fe5f5d586c8e87307b7a271f6b994afcc006 | ≥ ec624fe740b416fb68d536b37fb8eef46f90b5c2, < 4ef92743625818932b9c320152b58274c05e5053 | ≥ 5.15.13, < 5.15.197 | 5.16

3 vendors · 143 products

References

35 links
Show all 35 references