Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68813

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix ipv4 null-ptr-deref in route error path The IPv4 code path in __ip_vs_get_out_rt() calls dst_link_failure() without ensuring skb->dev is set, leading to a NULL pointer dereference in fib_compute_spec_dst() when ipv4_link_failure() attempts to send ICMP destination unreachable messages. The issue emerged after commit ed0de45a1008 ("ipv4: recompile ip options in ipv4_link_failure") started calling __ip_options_compile
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d74bbf0144941d87411bff1cc2ba1dba6d23f48ad6895461e6371cfca5e2e655
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"dd72a93c80408f06327dd2d956eb1a656d0b5903","status":"affected","version":"ed0de45a1008991fdaa27a0152befcb74d126a8b","versionType":"git"},{"lessThan":"312d7cd88882fc6cadcc08b02287497aaaf94bcd","status":"affected","version":"ed0de45a1008991fdaa27a0152befcb74d126a8b","versionType":"git"},{"lessThan":"cdeff10851c37a002d87a035818ebd60fdb74447","status":"affected","version":"ed0de45a100899…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.1"},{"lessThan":"5.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"dd72a93c80408f06327dd2d956eb1a656d0b5903","status":"affected","version":"ed0de45a1008991fdaa27a0152befcb74d126a8b","versionType":"git"},{"lessThan":"312d7cd88882fc6cadcc08b02287497aaaf94bcd","status":"affected","version":"ed0de45a1008991fdaa27a0152befcb74d126a8b","versionType":"git"},{"lessThan":"cdeff10851c37a002d87a035818ebd60fdb74447","status":"affected","version":"ed0de45a100899…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/netfilter/ipvs/ip_vs_xmit.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.1"},{"lessThan":"5.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"semver"},{…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/affected/1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/25ab24df31f7af843c96a38e0781b9165216e1a8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/312d7cd88882fc6cadcc08b02287497aaaf94bcd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/4729ff0581fbb7ad098b6153b76b6f5aac94618a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/689a627d14788ad772e0fa24c2e57a23dbc7ce90"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/ad891bb3d079a46a821bf2b8867854645191bab0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/cdeff10851c37a002d87a035818ebd60fdb74447"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/dd72a93c80408f06327dd2d956eb1a656d0b5903"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f7a222034ddeb5ee74feda6704ca06cad0e3407a43f9d8fe7c7a035654827c4e · sha256:39d7620d45a5eb1f… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer