CVE-2025-68303 — Out-of-bounds Write in Linux
53 documents8 sources
Severity
7.8HIGHOSV
OSV7.2OSV3.2
No vectorEPSS
0.0%
top 85.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: intel: punit_ipc: fix memory corruption
This passes the address of the pointer "&punit_ipcdev" when the intent
was to pass the pointer itself "punit_ipcdev" (without the ampersand).
This means that the:
complete(&ipcdev->cmd_complete);
in intel_punit_ioc() will write to a wrong memory address corrupting it.
Affected Packages7 packages
▶CVEListV5linux/linuxfdca4f16f57da76a8e68047923588a87d1c01f0a — 15d560cdf5b36c51fffec07ac2a983ab3bff4cb2+6