Not yet scoredPublished Dec 24, 2025

CVE-2025-68744bpf: Free special fields when update [lru_,]percpu_hash maps

Updated under an hour ago (Oct 27, 2026, 3:50 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: bpf: Free special fields when update [lru_,]percpu_hash maps As [lru_,]percpu_hash maps support BPF_KPTR_{REF,PERCPU}, missing calls to 'bpf_obj_free_fields()' in 'pcpu_copy_value()' could cause the memory referenced by BPF_KPTR_{REF,PERCPU} fields to be held until the map gets freed. Fix this by calling 'bpf_obj_free_fields()' after 'copy_map_value[,_long]()' in 'pcpu_copy_value()'.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	65334e64a493c6a0976de7ad56bf8b7a9ff04b4a builds before 994d6303ed0b84cbc795bb5becf7ed6de40d3f3c; 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a builds before 3bf1378747e251571e0de15e7e0a6bf2919044e7; 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a builds before 96a5cb7072cabbac5c66ac9318242c3bdceebb68; 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a builds before 4a03d69cece145e4fb527464be29c3806aa3221e; 65334e64a493c6a0976de7ad56bf8b7a9ff04b4a builds before 6af6e49a76c9af7d42eb923703e7648cb2bf401a	CNA record

References

References

https://git.kernel.org/stable/c/994d6303ed0b84cbc795bb5becf7ed6de40d3f3c
https://git.kernel.org/stable/c/3bf1378747e251571e0de15e7e0a6bf2919044e7
https://git.kernel.org/stable/c/96a5cb7072cabbac5c66ac9318242c3bdceebb68
https://git.kernel.org/stable/c/4a03d69cece145e4fb527464be29c3806aa3221e
https://git.kernel.org/stable/c/6af6e49a76c9af7d42eb923703e7648cb2bf401a

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.