CVE-2025-68724 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux
41 documents9 sources
Severity
7.8HIGHOSV
OSV7.2
No vectorEPSS
0.0%
top 88.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Latest updateApr 17
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id
Use check_add_overflow() to guard against potential integer overflows
when adding the binary blob lengths and the size of an asymmetric_key_id
structure and return ERR_PTR(-EOVERFLOW) accordingly. This prevents a
possible buffer overflow when copying data from potentially malicious
X.509 certificate fields that can be arbitrarily large, such as ASN.1
INTE…
Affected Packages16 packages
🔴Vulnerability Details
16📋Vendor Advisories
22🕵️Threat Intelligence
1💬Community
1Bugzilla▶
CVE-2025-68724 kernel: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id↗2025-12-24