CVE-2025-68216

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problems: * The `bpf_selftests/module_attach` test fails consistently. * Kernel lockup when a BPF program is attached to a module function [1]. * Critical kernel modules like WireGuard experience traffic disruption when their functions are traced with fentry [2]. Given the severity and the potential for other unknown side-effects, it is safest to disable the feature entirely for now. This patch prevents the BPF subsystem from allowing trampoline attachments to kernel module functions on LoongArch. This is a temporary mitigation until the core issues in the trampoline code for kernel module handling can be identified and fixed. [root@fedora bpf]# ./test_progs -a module_attach -v bpf_testmod.ko is already unloaded. Loading bpf_testmod.ko... Successfully loaded bpf_testmod.ko. test_module_attach:PASS:skel_open 0 nsec test_module_attach:PASS:set_attach_target 0 nsec test_module_attach:PASS:set_attach_target_explicit 0 nsec test_module_attach:PASS:skel_load 0 nsec libbpf: prog 'handle_fentry': failed to attach: -ENOTSUPP libbpf: prog 'handle_fentry': failed to auto-attach: -ENOTSUPP test_module_attach:FAIL:skel_attach skeleton attach failed: -524 Summary: 0/0 PASSED, 0 SKIPPED, 1 FAILED Successfully unloaded bpf_testmod.ko. [1]: https://lore.kernel.org/loongarch/CAK3+h2wDmpC-hP4u4pJY8T-yfKyk4yRzpu2LMO+C13FMT58oqQ@mail.gmail.com/ [2]: https://lore.kernel.org/loongarch/CAK3+h2wYcpc+OwdLDUBvg2rF9rvvyc5amfHT-KcFaK93uoELPg@mail.gmail.com/

• https://git.kernel.org/stable/c/44eb3849378be5f72b8be03edbacbdcd6f5eade4
• https://git.kernel.org/stable/c/677e6123e3d24adaa252697dc89740f2ac07664e

Published

Dec 16, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-68210In the Linux kernel, the following vulnerability has been re…
• CVE-2025-68211In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-68212In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-68213In the Linux kernel, the following vulnerability has been re…
• CVE-2025-68214In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2025-68215In the Linux kernel, the following vulnerability has been re…7
• CVE-2025-68217In the Linux kernel, the following vulnerability has been re…
• CVE-2025-68218In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2025-68219In the Linux kernel, the following vulnerability has been re…
• CVE-2025-6822A vulnerability was found in code-projects Inventory Managem…9.8
• CVE-2025-68220In the Linux kernel, the following vulnerability has been re…
• CVE-2025-68221In the Linux kernel, the following vulnerability has been re…