---
id: CVE-2025-68355
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bpf: Fix exclusive map memory leak

  When excl_prog_hash is 0 and excl_prog_hash_size is non-zero, the map also
  needs to be freed
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  bpf: Fix exclusive map memory leak

  When excl_prog_hash is 0 and excl_prog_hash_size is non-zero, the map also
  needs to be freed. Otherwise, the map memory will not be …
severity: none
published: '2025-12-24'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T11:10:00.203'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-68355'
references:
  - url: 'https://git.kernel.org/stable/c/688b745401ab16e2e1a3b504863f0a45fd345638'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f0022551745d72fc0e7bc8601234d690dee2178d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
epss: 0.00194
epssPercentile: 0.08329
ingestedAt: '2026-10-13T11:23:51.149Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix exclusive map memory leak

When excl_prog_hash is 0 and excl_prog_hash_size is non-zero, the map also
needs to be freed. Otherwise, the map memory will not be reclaimed, just
like the memory leak problem reported by syzbot [1].

syzbot reported:
BUG: memory leak
  backtrace (crc 7b9fb9b4):
    map_create+0x322/0x11e0 kernel/bpf/syscall.c:1512
    __sys_bpf+0x3556/0x3610 kernel/bpf/syscall.c:6131

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.