CVE-2025-68191 Details
Description
In the Linux kernel, the following vulnerability has been resolved: udp_tunnel: use netdev_warn() instead of netdev_WARN() netdev_WARN() uses WARN/WARN_ON to print a backtrace along with file and line information. In this case, udp_tunnel_nic_register() returning an error is just a failed operation, not a kernel bug. udp_tunnel_nic_register() can fail due to a memory allocation failure (kzalloc() or udp_tunnel_nic_alloc()). This is a normal runtime error and not a kernel bug. Replace netdev_WARN() with netdev_warn() accordingly.
A vulnerability exists in the Linux kernel's UDP tunnel implementation, where the netdev_WARN() function is improperly used. This function generates a warning backtrace, suggesting a kernel bug. However, the actual issue is a normal runtime error, such as a memory allocation failure, not indicative of a kernel flaw. The vulnerability is present in the stable group of the Linux kernel.
The vulnerability has been addressed by replacing netdev_WARN() with netdev_warn() in the UDP tunnel NIC event handling code.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 16, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/087f1ed450dc6e7e49ffbbbe5b78be1218c6d5e0 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/3c3b148bf8384c8a787753cf20abde1c5731f97f | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/45e4e4a8772fa1c5f6f38e82b732b3a9d8137af4 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/51b3033088f0420b19027e3d54cd989b6ebd987e | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/7758ec35ff3e9a31558eda4f0f9eb0ddfa78a8ba | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/c018a87942bf1607aeebf8dba5a210ca9a09a0fd | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/dc2f650f7e6857bf384069c1a56b2937a1ee370d | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 16, 2025 | New CVE Received | kernel.org |