CVE-2025-68199 — Insufficient Control Flow Management in Linux
Severity
5.8MEDIUM
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateFeb 24
Description
In the Linux kernel, the following vulnerability has been resolved:
codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext
When alloc_slab_obj_exts() fails and then later succeeds in allocating a
slab extension vector, it calls handle_failed_objexts_alloc() to mark all
objects in the vector as empty. As a result all objects in this slab
(slabA) will have their extensions set to CODETAG_EMPTY.
Later on if this slabA is used to allocate a slabobj_ext vector for
anot…
Affected Packages5 packages
▶CVEListV5linux/linux09c46563ff6d5f090211e48ff1fdba0ec7f4c97f — fc6acd4cddf76e7eb7db63649fe36980ce208f56+3
🔴Vulnerability Details
8📋Vendor Advisories
6Red Hat▶
kernel: codetag: debug: handle existing CODETAG_EMPTY in mark_objexts_empty for slabobj_ext↗2025-12-16