CVE-2025-68232 — Time-of-check Time-of-use (TOCTOU) Race Condition in Linux
Severity
7.2HIGHOSV
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
veth: more robust handing of race to avoid txq getting stuck
Commit dc82a33297fc ("veth: apply qdisc backpressure on full ptr_ring to
reduce TX drops") introduced a race condition that can lead to a permanently
stalled TXQ. This was observed in production on ARM64 systems (Ampere Altra
Max).
The race occurs in veth_xmit(). The producer observes a full ptr_ring and
stops the queue (netif_tx_stop_queue()). The subsequent condit…
Affected Packages5 packages
▶CVEListV5linux/linux9fe31b3f314534e238aa6d0b6fb492134cbcf8be — dd419a3f2ebc18cc00bc32c57fd052d7a188b78b+3