cbcvebase.
CVE-2025-68308
published 2025-12-16

CVE-2025-68308: In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers The…

PriorityP430high7.8
EPSS
0.17%
6.4th percentile
In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers The `kvaser_usb_leaf_wait_cmd()` and `kvaser_usb_leaf_read_bulk_callback` functions contain logic to zero-length commands. These commands are used to align data to the USB endpoint's wMaxPacketSize boundary. The driver attempts to skip these placeholders by aligning the buffer position `pos` to the next packet boundary using `round_up()` function. However, if zero-length command is found exactly on a packet boundary (i.e., `pos` is a multiple of wMaxPacketSize, including 0), `round_up` function will return the unchanged value of `pos`. This prevents `pos` to be increased, causing an infinite loop in the parsing logic. This patch fixes this in the function by using `pos + 1` instead. This ensures that even if `pos` is on a boundary, the calculation is based on `pos + 1`, forcing `round_up()` to always return the next aligned boundary.

Affected

26 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.159-1 (bookworm)linux 6.1.159-1 (bookworm)
debianlinux-6.1< linux 6.1.159-1 (bookworm)linux 6.1.159-1 (bookworm)
linuxlinux
linuxlinux>= 7259124eac7d1b76b41c7a9cb2511a30556deebe < 58343e0a4d43699f0e2f5b169384bbe4c0217add58343e0a4d43699f0e2f5b169384bbe4c0217add
linuxlinux>= 7259124eac7d1b76b41c7a9cb2511a30556deebe < 69c7825df64e24dc15d31631a1fc9145324b134569c7825df64e24dc15d31631a1fc9145324b1345
linuxlinux>= 7259124eac7d1b76b41c7a9cb2511a30556deebe < 028e89c7e8b4346302e88df01cc50e0a1f05791a028e89c7e8b4346302e88df01cc50e0a1f05791a
linuxlinux>= 7259124eac7d1b76b41c7a9cb2511a30556deebe < e9dd83a75a7274edef21682c823bf0b66d7b6b7fe9dd83a75a7274edef21682c823bf0b66d7b6b7f
linuxlinux>= 7259124eac7d1b76b41c7a9cb2511a30556deebe < 0897cea266e39166a36111059ba147192b36592f0897cea266e39166a36111059ba147192b36592f
linuxlinux>= 7259124eac7d1b76b41c7a9cb2511a30556deebe < bd8135a560cf6e64f0b98ed4daadf126a38f7f48bd8135a560cf6e64f0b98ed4daadf126a38f7f48
linuxlinux>= 7259124eac7d1b76b41c7a9cb2511a30556deebe < 0c73772cd2b8cc108d5f5334de89ad648d89b9ec0c73772cd2b8cc108d5f5334de89ad648d89b9ec
linuxlinux_kernel>= 0 < 5.10.247-15.10.247-1
linuxlinux_kernel>= 0 < 6.1.159-16.1.159-1
linuxlinux_kernel>= 0 < 6.12.63-16.12.63-1
linuxlinux_kernel>= 0 < 6.17.11-16.17.11-1
linuxlinux_kernel>= 0 < 5.15.0-173.1835.15.0-173.183
linuxlinux_kernel>= 0 < 6.8.0-106.1066.8.0-106.106
linuxlinux_kernel>= 0 < 6.17.0-19.196.17.0-19.19
linuxlinux_kernel>= 4.19.0 < 5.10.2475.10.247
linuxlinux_kernel>= 5.11.0 < 5.15.1975.15.197
linuxlinux_kernel>= 5.16.0 < 6.1.1596.1.159
linuxlinux_kernel>= 6.13.0 < 6.17.116.17.11
linuxlinux_kernel>= 6.2.0 < 6.6.1196.6.119
linuxlinux_kernel>= 6.7.0 < 6.12.616.12.61
msrcazl3_kernel_6.6.117.1-1_on_azure_linux_3.0
ubuntulinux-azure-5.15

CVSS provenance

osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_msrc5.5MEDIUM
vendor_redhat5.5LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.