CVE-2025-68191
Description
In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uses WARN/WARN_ON to print a backtrace along with file and line information. In this case, udp_tunnel_nic_register() returning an error is just a failed operation, not a kernel bug. udp_tunnel_nic_register() can fail due to a memory allocation failure (kzalloc() or udp_tunnel_nic_alloc()). This is a normal runtime error and not a kernel bug. Replace netdev_WARN() with netdev_warn() accordingly.
How to fix
- Linux Linux087f1ed450dc6e7e49ffbbbe5b78be1218c6d5e0, 45e4e4a8772fa1c5f6f38e82b732b3a9d8137af4, 7758ec35ff3e9a31558eda4f0f9eb0ddfa78a8ba, c018a87942bf1607aeebf8dba5a210ca9a09a0fd, 51b3033088f0420b19027e3d54cd989b6ebd987e, 3c3b148bf8384c8a787753cf20abde1c5731f97f, dc2f650f7e6857bf384069c1a56b2937a1ee370d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | cc4e3835eff474aa274d6e1d18f69d9d296d3b76 ≤ v < 087f1ed450dc6e7e49ffbbbe5b78be1218c6d5e0, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 ≤ v < 45e4e4a8772fa1c5f6f38e82b732b3a9d8137af4, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 ≤ v < 7758ec35ff3e9a31558eda4f0f9eb0ddfa78a8ba, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 ≤ v < c018a87942bf1607aeebf8dba5a210ca9a09a0fd, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 ≤ v < 51b3033088f0420b19027e3d54cd989b6ebd987e, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 ≤ v < 3c3b148bf8384c8a787753cf20abde1c5731f97f, cc4e3835eff474aa274d6e1d18f69d9d296d3b76 ≤ v < dc2f650f7e6857bf384069c1a56b2937a1ee370d, 5.9 | 087f1ed450dc6e7e49ffbbbe5b78be1218c6d5e0, 45e4e4a8772fa1c5f6f38e82b732b3a9d8137af4, 7758ec35ff3e9a31558eda4f0f9eb0ddfa78a8ba, c018a87942bf1607aeebf8dba5a210ca9a09a0fd, 51b3033088f0420b19027e3d54cd989b6ebd987e, 3c3b148bf8384c8a787753cf20abde1c5731f97f, dc2f650f7e6857bf384069c1a56b2937a1ee370d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.