CVE-2025-68191

Linux Kernel - Denial of Service via Memory Allocation Failure in udp_tunnel_nic_register

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uses WARN/WARN_ON to print a backtrace along with file and line information. In this case, udp_tunnel_nic_register() returning an error is just a failed operation, not a kernel bug. udp_tunnel_nic_register() can fail due to a memory allocation failure (kzalloc() or udp_tunnel_nic_alloc()). This is a normal runtime error and not a kernel bug. Replace netdev_WARN() with netdev_warn() accordingly.

Scores

EPSS 0.0006
EPSS Percentile 18.3%

Details

Status published
Products (22)
linux/Kernel 5.11.0 - 5.15.197linux
linux/Kernel 5.16.0 - 6.1.159linux
linux/Kernel 5.9.0 - 5.10.247linux
linux/Kernel 6.13.0 - 6.17.8linux
linux/Kernel 6.2.0 - 6.6.117linux
linux/Kernel 6.7.0 - 6.12.58linux
Linux/Linux < 5.9
Linux/Linux 5.10.247 - 5.10.*
Linux/Linux 5.15.197 - 5.15.*
Linux/Linux 5.9
... and 12 more
Published Dec 16, 2025
Tracked Since Feb 18, 2026