cbcvebase.
CVE-2025-68362
published 2025-12-24

CVE-2025-68362: In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() The…

PriorityP425high7.8
EPSS
0.18%
8.2th percentile
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() The rtl8187_rx_cb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not validate if the received packet (skb->len from urb->actual_length) is large enough to contain this header. If a truncated packet is received, this will lead to a buffer underflow, reading memory before the start of the skb data area, and causing a kernel panic. Add length checks for both rtl8187 and rtl8187b descriptor headers before attempting to access them, dropping the packet cleanly if the check fails.

Affected

48 ranges· showing 25
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.162-1 (bookworm)linux 6.1.162-1 (bookworm)
debianlinux-6.1< linux 6.1.162-1 (bookworm)linux 6.1.162-1 (bookworm)
linuxlinux
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < 118e12bf3e4288cf845cd3759bd9d4c99f91aab5118e12bf3e4288cf845cd3759bd9d4c99f91aab5
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < 6a96bd0d94305fd04a6ac64446ec113bae2893846a96bd0d94305fd04a6ac64446ec113bae289384
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < e2f3ea15e804607e0a4a34a2f6c331c8750b68bce2f3ea15e804607e0a4a34a2f6c331c8750b68bc
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < dc153401fb26c1640a2b279c47b65e1c416af276dc153401fb26c1640a2b279c47b65e1c416af276
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < 4758770a673c60d8f615809304d72e1432fa63554758770a673c60d8f615809304d72e1432fa6355
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < 638d4148e166d114a4cd7becaae992ce1a815ed8638d4148e166d114a4cd7becaae992ce1a815ed8
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < 5ebf0fe7eaef9f6173a4c6ea77c5353e21645d155ebf0fe7eaef9f6173a4c6ea77c5353e21645d15
linuxlinux>= 6f7853f3cbe457067e9fe05461f56c7ea4ac488c < b647d2574e4583c2e3b0ab35568f60c88e910840b647d2574e4583c2e3b0ab35568f60c88e910840
linuxlinux_kernel>= 0 < 5.10.249-15.10.249-1
linuxlinux_kernel>= 0 < 6.1.162-16.1.162-1
linuxlinux_kernel>= 0 < 6.12.63-16.12.63-1
linuxlinux_kernel>= 0 < 6.17.13-16.17.13-1
linuxlinux_kernel>= 0 < 5.15.0-173.1835.15.0-173.183
linuxlinux_kernel>= 0 < 6.17.0-19.196.17.0-19.19
linuxlinux_kernel>= 2.6.27 < 5.10.2485.10.248
linuxlinux_kernel>= 5.11.0 < 5.15.1985.15.198
linuxlinux_kernel>= 5.16.0 < 6.1.1606.1.160
linuxlinux_kernel>= 6.13.0 < 6.17.136.17.13
linuxlinux_kernel>= 6.18.0 < 6.18.26.18.2
linuxlinux_kernel>= 6.2.0 < 6.6.1206.6.120
linuxlinux_kernel>= 6.7.0 < 6.12.636.12.63
msrcazl3_kernel_6.6.117.1-1_on_azure_linux_3.0

CVSS provenance

osv7.8HIGH
vendor_ubuntu7.8HIGH
vendor_redhat6.5MEDIUM
vendor_msrc5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.