CVE-2025-68188

Source
https://cve.org/CVERecord?id=CVE-2025-68188
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68188.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68188
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (3)
openSUSE (1)
ROOT (5)
SUSE (12)
UBUNTU (1)
Related
Published
2025-12-16T13:43:10Z
Modified
2026-10-22T02:49:06Z
Summary
tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()
Details

In the Linux kernel, the following vulnerability has been resolved:

tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()

Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68188.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cf1ef3f0719b4dcb74810ed507e2a2540f9811b4
Fixed
e61dfd906ad027a4ade1f89e5fe706a3fcd52527
Fixed
bc2b881a0896c111c1041d8bb1f92a3b3873ace5
Fixed
06da08d9355bf8e2070459bbedbe372ccc02cc0e
Fixed
b62a59c18b692f892dcb8109c1c2e653b2abc95c

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68188.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.12.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.58
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68188.json"