CVE-2025-68303
High
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corruption This passes the address of the pointer "&punit_ipcdev" when the intent was to pass the pointer itself "punit_ipcdev" (without the ampersand). This means that the: complete(&ipcdev->cmd_complete); in intel_punit_ioc() will write to a wrong memory address corrupting it.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux15d560cdf5b36c51fffec07ac2a983ab3bff4cb2, 46e9d6f54184573dae1dcbcf6685a572ba6f4480, 3e7442c5802146fd418ba3f68dcb9ca92b5cec83, a21615a4ac6fecbb586d59fe2206b63501021789, c2ee6d38996775a19bfdf20cb01a9b8698cb0baa, 9b9c0adbc3f8a524d291baccc9d0c04097fb4869 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | fdca4f16f57da76a8e68047923588a87d1c01f0a ≤ v < 15d560cdf5b36c51fffec07ac2a983ab3bff4cb2, fdca4f16f57da76a8e68047923588a87d1c01f0a ≤ v < 46e9d6f54184573dae1dcbcf6685a572ba6f4480, fdca4f16f57da76a8e68047923588a87d1c01f0a ≤ v < 3e7442c5802146fd418ba3f68dcb9ca92b5cec83, fdca4f16f57da76a8e68047923588a87d1c01f0a ≤ v < a21615a4ac6fecbb586d59fe2206b63501021789, fdca4f16f57da76a8e68047923588a87d1c01f0a ≤ v < c2ee6d38996775a19bfdf20cb01a9b8698cb0baa, fdca4f16f57da76a8e68047923588a87d1c01f0a ≤ v < 9b9c0adbc3f8a524d291baccc9d0c04097fb4869, 4.5 | 15d560cdf5b36c51fffec07ac2a983ab3bff4cb2, 46e9d6f54184573dae1dcbcf6685a572ba6f4480, 3e7442c5802146fd418ba3f68dcb9ca92b5cec83, a21615a4ac6fecbb586d59fe2206b63501021789, c2ee6d38996775a19bfdf20cb01a9b8698cb0baa, 9b9c0adbc3f8a524d291baccc9d0c04097fb4869 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.