CVE-2025-68750 — Linux vulnerability
37 documents7 sources
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Latest updateMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: potential integer overflow in usbg_make_tpg()
The variable tpgt in usbg_make_tpg() is defined as unsigned long and is
assigned to tpgt->tport_tpgt, which is defined as u16. This may cause an
integer overflow when tpgt is greater than USHRT_MAX (65535). I
haven't tried to trigger it myself, but it is possible to trigger it
by calling usbg_make_tpg() with a large value for tpgt.
I modified the type of tpgt to match tpgt->t…
Affected Packages5 packages
▶CVEListV5linux/linuxc52661d60f636d17e26ad834457db333bd1df494 — 0861b9cb2ff519b7c5a3b1dd52a343e18c4efb24+8