CVE-2025-68199

A flaw was identified in the Linux kernel’s SLUB memory allocator involving the handling of slab object extension vectors.When an extension vector allocation initially fails and later succeeds, the failure path marks all objects in the slab with a sentinel tag. If this slab is later reused for another object extension allocation, the pointer to the extension vector may include a sentinel value instead of a null, which is unexpected by the free path. During slab freeing, the mark_objexts_empty() helper will generate a warning or a kernel BUG due to incorrectly assuming a null extension rather than a sentinel value

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.