Argument Type Mismatch in Linux Kernel Impacts Network Functionality

CVE-2025-68234

What is CVE-2025-68234?

An issue has been identified in the Linux kernel's handling of io_uring commands involving the skb_queue_splice() function. This vulnerability arises due to incorrectly transposed arguments in the splice operation, which can lead to improper data handling in network sockets. When timestamp retrieval requires retries, any existing SKB entries may be incorrectly spliced into the socket queue, which can disrupt normal network functionality. This fix corrects the argument types, ensuring that data is spliced in the correct direction and enhancing the overall integrity of network operations.

References