CVE-2025-68188

Updated on 16 Dec 2025

Severity

7.0 High severity

Details

CVSS score
7.0

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() Use RCU to avoid a pair of atomic operations and a potential UAF on dst_dev()->flags. A potential use-after-free was found in the TCP Fast Open implementation in the Linux kernel. The tcp_fastopen_active_disable_ofo_check() function accesses dst_dev()->flags without proper RCU protection, which could lead to accessing a freed network device structure.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
AlmaLinux 9.2 ESU Planned
Debian 13 Will Not Fix