CVE-2025-68795

A buffer overflow prevention fix was implemented in the Linux kernel's ethtool interface. A race condition exists between the ETHTOOL_GSSET_INFO, ETHTOOL_GSTRINGS, and ETHTOOL_GSTATS ioctl calls where stat counts can change between calls if the device is reconfigured. This could cause the kernel to write beyond the userspace-allocated buffer.

The fix prevents overflow by returning nothing when a size mismatch is detected. Some drivers with dynamic counters (mlx5, bnx2x, bna, ksz884x) are more susceptible to this race. The window requires device reconfiguration during ethtool stats queries.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.