SECUFOCUSNOW
Home›CVE index›CVE-2025-68801
Review reviewHigh

CVE-2025-68801

Linux

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-after-free when dereferencing a neighbour [1]. The problem seems to be that the driver stores a pointer to the neighbour, but without holding a reference on it. A reference is only taken when the neighbour is used by a nexthop. Fix by simplifying the reference counting scheme. Always take a reference when storing a neighbour pointer in a neighbour entry. Avoid taking a referencing when the neighbour is used by a nexthop as the neighbour entry asso...

CVSS
7.8
EPSS
0.13%
2.64% percentile
CISA KEV
Not listed
Published
2026.01.14
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.13%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_router: Fix neighbour use-after-free We sometimes observe use-after-free when dereferencing a neighbour [1]. The problem seems to be that the driver stores a pointer to the neighbour, but without holding a reference on it. A reference is only taken when the neighbour is used by a nexthop. Fix by simplifying the reference counting scheme. Always take a reference when storing a neighbour pointer in a neighbour entry. Avoid taking a referencing when the neighbour is used by a nexthop as the neighbour entry asso...

Affected product and versions

Product
Linux
Affected versions
>= 6cf3c971dc84cb36579515ddb488919b9e9fb6de < a2dfe6758fc63e542105bee8b17a3a7485684db0, >= 6cf3c971dc84cb36579515ddb488919b9e9fb6de < 9e0a0d9eeb0dbeba2c83fa837885b19b8b9230fc, >= 6cf3c971dc84cb36579515ddb488919b9e9fb6de < c437fbfd4382412598cdda1f8e2881b523668cc2, >= 6cf3c971dc84cb36579515ddb488919b9e9fb6de < 4a3c569005f42ab5e5b2ad637132a33bf102cc08, >= 6cf3c971dc84cb36579515ddb488919b9e9fb6de < ed8141b206bdcfd5d0b92c90832eeb77b7a60a0a, >= 6cf3c971dc84cb36579515ddb488919b9e9fb6de < 675c5aeadf6472672c472dc0f26401e4fcfbf254, >= 6cf3c971dc84cb36579515ddb488919b9e9fb6de < 8b0e69763ef948fb872a7767df4be665d18f5fd4, >= 4.8
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available
CVE-2025-68801 — Linux | SECUFOCUS NOW