Review reviewHigh

CVE-2025-68232

Linux

In the Linux kernel, the following vulnerability has been resolved: veth: more robust handing of race to avoid txq getting stuck Commit dc82a33297fc ("veth: apply qdisc backpressure on full ptr_ring to reduce TX drops") introduced a race condition that can lead to a permanently stalled TXQ. This was observed in production on ARM64 systems (Ampere Altra Max). The race occurs in veth_xmit(). The producer observes a full ptr_ring and stops the queue (netif_tx_stop_queue()). The subsequent conditional logic, intended to re-wake the queue if the consumer had just emptied it (if (__ptr_ring_empty...

CVSS: 7.5
EPSS: 0.36%
CISA KEV: Not listed
Published: 2025.12.16

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.36%

Technical severityCVSS 7.5

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 9fe31b3f314534e238aa6d0b6fb492134cbcf8be < dd419a3f2ebc18cc00bc32c57fd052d7a188b78b, >= dc82a33297fc2c58cb0b2b008d728668d45c0f6a < 6c8a8b9257a660e622689e23c8fbad4ba2b561b9, >= dc82a33297fc2c58cb0b2b008d728668d45c0f6a < 5442a9da69789741bfda39f34ee7f69552bf0c56, >= 6.16
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE: Not available