Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() If timestamp… (CVE-2025-68234)
In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() If timestamp retriving needs to be retried and the local list of SKB's already has entries, then it's spliced back into the socket queue. However, the arguments for the splice helper are transposed, causing exactly the wrong direction of splicing into the on-stack list. Fix that up.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's io_uring/cmd_net component was due to transposed arguments passed to the skb_queue_splice() helper function. When timestamp retrieval needed retrying and the local socket buffer (SKB) list was non-empty, the code incorrectly spliced the SKB list back into the socket queue in the wrong direction. This logic error could cause serious kernel-level issues affecting system stability and security. The vulnerability is tracked as CVE-2025-68234 and carries a high severity rating with CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Potential Impact
The vulnerability impacts the Linux kernel's networking subsystem, potentially allowing an attacker with local privileges to cause significant confidentiality, integrity, and availability damage. The incorrect splice operation could lead to kernel memory corruption or other unintended behavior, compromising system security and stability.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel to correct the argument order for skb_queue_splice(). Users should apply the official kernel updates or patches that address CVE-2025-68234 as soon as they become available. Since no specific patch links or vendor advisories are provided, users should monitor official Linux kernel sources for the fix.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() If timestamp… (CVE-2025-68234)
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd_net: fix wrong argument types for skb_queue_splice() If timestamp retriving needs to be retried and the local list of SKB's already has entries, then it's spliced back into the socket queue. However, the arguments for the splice helper are transposed, causing exactly the wrong direction of splicing into the on-stack list. Fix that up.
CVSS v3.1
Score 7.8high
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's io_uring/cmd_net component was due to transposed arguments passed to the skb_queue_splice() helper function. When timestamp retrieval needed retrying and the local socket buffer (SKB) list was non-empty, the code incorrectly spliced the SKB list back into the socket queue in the wrong direction. This logic error could cause serious kernel-level issues affecting system stability and security. The vulnerability is tracked as CVE-2025-68234 and carries a high severity rating with CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Potential Impact
The vulnerability impacts the Linux kernel's networking subsystem, potentially allowing an attacker with local privileges to cause significant confidentiality, integrity, and availability damage. The incorrect splice operation could lead to kernel memory corruption or other unintended behavior, compromising system security and stability.
Mitigation Recommendations
A fix for this vulnerability has been implemented in the Linux kernel to correct the argument order for skb_queue_splice(). Users should apply the official kernel updates or patches that address CVE-2025-68234 as soon as they become available. Since no specific patch links or vendor advisories are provided, users should monitor official Linux kernel sources for the fix.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-q84f-vw64-jf47
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2025-68234"]
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a6b72d39c2644c7f84782dd
Added to database: 07/30/2026, 15:50:43 UTC
Last enriched: 07/30/2026, 18:40:16 UTC
Last updated: 09/10/2026, 19:24:57 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.