CVE-2025-68234 io_uring/cmd_net: fix wrong argument types for skb_queue_splice()
Incorrect argument order in io_uring network command handling causes improper socket queue splicing, potentially leading to undefined behavior or data corruption.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68234?
CVE-2025-68234 is a high-severity vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
io_uring/cmd_net: fix wrong argument types for skb_queue_splice()
If timestamp retriving needs to be retried and the local list of SKB's already has entries, then it's spliced back into the socket queue. However, the arguments for the splice helper are transposed, causing exactly the wrong direction of splicing into the on-stack list. Fix that up.
Which versions are affected by CVE-2025-68234?
How do I fix CVE-2025-68234?
Apply the vendor's patch.
Is CVE-2025-68234 being exploited?
There is no known exploitation of CVE-2025-68234 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68234, DEBIAN-CVE-2025-68234, GHSA-q84f-vw64-jf47, UBUNTU-CVE-2025-68234.