CVE-2025-68227 — Comparison Using Wrong Factors in Linux
Severity
7.8HIGHOSV
OSV7.2OSV3.2
No vectorEPSS
0.1%
top 78.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
mptcp: Fix proto fallback detection with BPF
The sockmap feature allows bpf syscall from userspace, or based
on bpf sockops, replacing the sk_prot of sockets during protocol stack
processing with sockmap's custom read/write interfaces.
'''
tcp_rcv_state_process()
syn_recv_sock()/subflow_syn_recv_sock()
tcp_init_transfer(BPF_SOCK_OPS_PASSIVE_ESTABLISHED_CB)
bpf_skops_established sk_prot to compare with the native sk_prot, but t…
Affected Packages7 packages
▶CVEListV5linux/linux0b4f33def7bbde1ce2fea05f116639270e7acdc7 — 92c4092fe012ecdfa5fb05d394f1c1d8f91ad81c+7