{
  "cveId": "CVE-2025-68216",
  "url": "https://patchblox.com/security/cve/CVE-2025-68216",
  "summary": "CVE-2025-68216 is fixed in linux on 1 platform by DEBIAN-CVE-2025-68216 (version 6.17.10-1), released December 16, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  LoongArch: BPF: Disable trampoline for kernel mo...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  LoongArch: BPF: Disable trampoline for kernel module function trace  The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problems:  * The \u0060bpf_selftests/module_attach\u0060 test fails consistently. * Kernel lockup when a BPF program is attached to a module function [1]. * Critical kernel modules like WireGuard experience traffic disruption   when their functions are traced with fentry [2].  Given the severity and the potential for other unknown side-effects, it is safest to disable the feature entirely for now. This patch prevents the BPF subsystem from allowing trampoline attachments to kernel module functions on LoongArch.  This is a temporary mitigation until the core issues in the trampoline code for kernel module handling can be identified and fixed.  [root@fedora bpf]# ./test_progs -a module_attach -v bpf_testmod.ko is already unloaded. Loading bpf_testmod.ko... Successfully loaded bpf_testmod.ko. test_module_attach:PASS:skel_open 0 nsec test_module_attach:PASS:set_attach_target 0 nsec test_module_attach:PASS:set_attach_target_explicit 0 nsec test_module_attach:PASS:skel_load 0 nsec libbpf: prog \u0027handle_fentry\u0027: failed to attach: -ENOTSUPP libbpf: prog \u0027handle_fentry\u0027: failed to auto-attach: -ENOTSUPP test_module_attach:FAIL:skel_attach skeleton attach failed: -524 Summary: 0/0 PASSED, 0 SKIPPED, 1 FAILED Successfully unloaded bpf_testmod.ko.  [1]: https://lore.kernel.org/loongarch/CAK3\u002Bh2wDmpC-hP4u4pJY8T-yfKyk4yRzpu2LMO\u002BC13FMT58oqQ@mail.gmail.com/ [2]: https://lore.kernel.org/loongarch/CAK3\u002Bh2wYcpc\u002BOwdLDUBvg2rF9rvvyc5amfHT-KcFaK93uoELPg@mail.gmail.com/",
  "published": "2025-12-16T14:15:54Z",
  "severity": "",
  "epss": 0.00185,
  "epssPercentile": 0.08115,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.17.10-1",
      "fix": "DEBIAN-CVE-2025-68216",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-68216",
      "released": "2025-12-16T14:15:54Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}