CVE-2025-68234

Description

In the Linux kernel, the following vulnerability has been resolved:io_uring/cmd_net: fix wrong argument types for skb_queue_splice()If timestamp retriving needs to be retried and the local list ofSKBs already has entries, then its spliced back into the socketqueue. However, the arguments for the splice helper are transposed,causing exactly the wrong direction of splicing into the on-stacklist. Fix that up.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.027

Associated Vulnerability

No records found

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234