CVE-2025-68744
Unknown Unknown - Not Provided

Use-After-Free in Linux Kernel BPF percpu_hash Maps

Publication date: 2025-12-24

Last updated on: 2025-12-24

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]percpu_hash maps As [lru_,]percpu_hash maps support BPF_KPTR_{REF,PERCPU}, missing calls to 'bpf_obj_free_fields()' in 'pcpu_copy_value()' could cause the memory referenced by BPF_KPTR_{REF,PERCPU} fields to be held until the map gets freed. Fix this by calling 'bpf_obj_free_fields()' after 'copy_map_value[,_long]()' in 'pcpu_copy_value()'.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-24
Last Modified
2025-12-24
Generated
2026-07-06
AI Q&A
2025-12-24
EPSS Evaluated
2026-07-05
NVD
CVE-2025-68744

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves the handling of special fields in [lru_,]percpu_hash maps used by BPF (Berkeley Packet Filter). Specifically, missing calls to the function 'bpf_obj_free_fields()' in the 'pcpu_copy_value()' function could cause memory referenced by BPF_KPTR_{REF,PERCPU} fields to remain allocated until the entire map is freed. The issue was fixed by ensuring 'bpf_obj_free_fields()' is called after copying map values, preventing memory from being held unnecessarily.

Impact Analysis

This vulnerability can lead to memory being held longer than necessary in the kernel due to missing deallocation calls. This could cause increased memory usage and potential memory leaks in systems using these BPF maps, potentially degrading system performance or stability over time.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-68744. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart