CVE-2025-68744

Linux Kernel 6.4.0-6.6.119, 6.7.0-6.12.62, 6.13.0-6.17.12, 6.18.0-6.18.1 - Memory Leak in BPF Percpu Hash Map Update

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]percpu_hash maps As [lru_,]percpu_hash maps support BPF_KPTR_{REF,PERCPU}, missing calls to 'bpf_obj_free_fields()' in 'pcpu_copy_value()' could cause the memory referenced by BPF_KPTR_{REF,PERCPU} fields to be held until the map gets freed. Fix this by calling 'bpf_obj_free_fields()' after 'copy_map_value[,_long]()' in 'pcpu_copy_value()'.

Scores

EPSS 0.0002
EPSS Percentile 6.4%

Details

Status published
Products (16)
linux/Kernel 6.13.0 - 6.17.13linux
linux/Kernel 6.18.0 - 6.18.2linux
linux/Kernel 6.4.0 - 6.6.120linux
linux/Kernel 6.7.0 - 6.12.63linux
Linux/Linux < 6.4
Linux/Linux 6.12.63 - 6.12.*
Linux/Linux 6.17.13 - 6.17.*
Linux/Linux 6.18.2 - 6.18.*
Linux/Linux 6.19
Linux/Linux 6.4
... and 6 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026