CVE-2025-68188

{"id": "CVE-2025-68188", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "cf1ef3f0719b4dcb74810ed507e2a2540f9811b4", "lessThan": "bc2b881a0896c111c1041d8bb1f92a3b3873ace5", "versionType": "git"}, {"status": "affected", "version": "cf1ef3f0719b4dcb74810ed507e2a2540f9811b4", "lessThan": "06da08d9355bf8e2070459bbedbe372ccc02cc0e", "versionType": "git"}, {"status": "affected", "version": "cf1ef3f0719b4dcb74810ed507e2a2540f9811b4", "lessThan": "b62a59c18b692f892dcb8109c1c2e653b2abc95c", "versionType": "git"}], "programFiles": ["net/ipv4/tcp_fastopen.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.12"}, {"status": "unaffected", "version": "0", "lessThan": "4.12", "versionType": "semver"}, {"status": "unaffected", "version": "6.12.58", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.17.8", "versionType": "semver", "lessThanOrEqual": "6.17.*"}, {"status": "unaffected", "version": "6.18", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["net/ipv4/tcp_fastopen.c"], "defaultStatus": "affected"}]}], "published": "2025-12-16T14:15:51.460", "references": [{"url": "https://git.kernel.org/stable/c/06da08d9355bf8e2070459bbedbe372ccc02cc0e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/b62a59c18b692f892dcb8109c1c2e653b2abc95c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/bc2b881a0896c111c1041d8bb1f92a3b3873ace5", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check()\n\nUse RCU to avoid a pair of atomic operations and a potential\nUAF on dst_dev()->flags."}], "lastModified": "2026-06-17T09:58:42.410", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}