CVE-2025-68192 — Access of Uninitialized Pointer in Linux
Severity
7.8HIGHOSV
OSV3.2
No vectorEPSS
0.1%
top 79.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
Raw IP packets have no MAC header, leaving skb->mac_header uninitialized.
This can trigger kernel panics on ARM64 when xfrm or other subsystems
access the offset due to strict alignment checks.
Initialize the MAC header to prevent such crashes.
This can trigger kernel panics on ARM when running IPsec over the
qmimux0 interface.
Example trace:
Internal erro…
Affected Packages6 packages
▶CVEListV5linux/linuxc6adf77953bcec0ad63d7782479452464e50f7a3 — d693c47fb902b988f5752182e4f7fbde5e6dcaf9+8