CVE-2025-68208

An out-of-bounds access vulnerability was found in the BPF verifier in the Linux kernel. The widen_imprecise_scalars() function compares verifier states with different allocated stack depths without bounds checking. This can cause out-of-bounds stack array access when the ancestor state has larger stack allocation than the current state.

Exploiting this requires loading BPF programs with specific verifier state patterns. CAP_BPF or equivalent privileges are needed to load BPF programs, limiting the attack surface.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.