CVE-2025-68743 mshv: Fix create memory region overlap check
A logic error in the Linux kernel's mshv driver allows userspace to bypass memory region overlap checks, potentially leading to privilege escalation or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68743?
CVE-2025-68743 is a vulnerability in Linux, published on 24 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
mshv: Fix create memory region overlap check
The current check is incorrect; it only checks if the beginning or end of a region is within an existing region. This doesn't account for userspace specifying a region that begins before and ends after an existing region.
Change the logic to a range intersection check against gfns and uaddrs for each region.
Remove mshv_partition_region_by_uaddr() as it is no longer used.
Which versions are affected by CVE-2025-68743?
How do I fix CVE-2025-68743?
Apply the vendor's patch.
Is CVE-2025-68743 being exploited?
There is no known exploitation of CVE-2025-68743 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68743, DEBIAN-CVE-2025-68743, GHSA-98rv-gpf2-fj42, UBUNTU-CVE-2025-68743.