The Linux kernel contained a vulnerability in the BPF verifier's widen_imprecise_scalars() function where it failed to correctly account for the current allocated stack depth when comparing ancestor and queued states in the verification state tree. This mismatch could cause out-of-bounds access to the verifier state's stack frames, potentially leading to serious security impacts. The vulnerability was addressed by ensuring widen_imprecise_scalars() properly considers the allocated stack depth of the queued state to avoid invalid memory access.

The vulnerability allows out-of-bounds stack access within the BPF verifier, which can lead to compromise of confidentiality, integrity, and availability of the affected system. The CVSS vector indicates local attack vector with low complexity, requiring low privileges and no user interaction, making it a high-risk issue if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no explicit patch or vendor advisory is provided, users should monitor official Linux kernel security advisories for updates addressing CVE-2025-68208 and apply fixes promptly once available.