CVE-2025-68191udp_tunnel: use netdev_warn() instead of netdev_WARN()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uses WARN/WARN_ON to print a backtrace along with file and line information. In this case, udp_tunnel_nic_register() returning an error is just a failed operation, not a kernel bug. udp_tunnel_nic_register() can fail due to a memory allocation failure (kzalloc() or udp_tunnel_nic_alloc()). This is a normal runtime error and not a kernel bug. Replace netdev_WARN() with netdev_warn() accordingly.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- May 11, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from cc4e3835eff474aa274d6e1d18f69d9d296d3b76 before 087f1ed450dc6e7e49ffbbbe5b78be1218c6d5e0; from cc4e3835eff474aa274d6e1d18f69d9d296d3b76 before 45e4e4a8772fa1c5f6f38e82b732b3a9d8137af4; from cc4e3835eff474aa274d6e1d18f69d9d296d3b76 before 7758ec35ff3e9a31558eda4f0f9eb0ddfa78a8ba; from cc4e3835eff474aa274d6e1d18f69d9d296d3b76 before c018a87942bf1607aeebf8dba5a210ca9a09a0fd; from cc4e3835eff474aa274d6e1d18f69d9d296d3b76 before 51b3033088f0420b19027e3d54cd989b6ebd987e; from cc4e3835eff474aa274d6e1d18f69d9d296d3b76 before 3c3b148bf8384c8a787753cf20abde1c5731f97f; from cc4e3835eff474aa274d6e1d18f69d9d296d3b76 before dc2f650f7e6857bf384069c1a56b2937a1ee370d | CNA record |
References
- https://git.kernel.org/stable/c/087f1ed450dc6e7e49ffbbbe5b78be1218c6d5e0
- https://git.kernel.org/stable/c/45e4e4a8772fa1c5f6f38e82b732b3a9d8137af4
- https://git.kernel.org/stable/c/7758ec35ff3e9a31558eda4f0f9eb0ddfa78a8ba
- https://git.kernel.org/stable/c/c018a87942bf1607aeebf8dba5a210ca9a09a0fd
- https://git.kernel.org/stable/c/51b3033088f0420b19027e3d54cd989b6ebd987e
- https://git.kernel.org/stable/c/3c3b148bf8384c8a787753cf20abde1c5731f97f
- https://git.kernel.org/stable/c/dc2f650f7e6857bf384069c1a56b2937a1ee370d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.