Race Condition in Linux Kernel veth Module Affects ARM64 Systems

CVE-2025-68232

What is CVE-2025-68232?

A race condition in the veth module of the Linux kernel can cause the transmission queue (TXQ) to become permanently stalled. This vulnerability is primarily observed on ARM64 systems, such as the Ampere Altra Max. The issue stems from a flawed implementation in the wake-up logic after the queue has been stopped due to a full pointer ring. The incorrect use of the __ptr_ring_empty() API leads to a lost wakeup scenario, where the TXQ remains stopped, halting all network traffic. A recent patch addresses this by revising the logic to ensure correct handling of the queue state and eliminating the race condition.

References