CVE-2025-68731
Description
In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array() The unpublished smatch static checker reported a warning. drivers/accel/amdxdna/aie2_pci.c:904 aie2_query_ctx_status_array() warn: potential user controlled sizeof overflow 'args->num_element * args->element_size' '1-u32max(user) * 1-u32max(user)' Even this will not cause a real issue, it is better to put a reasonable limitation for element_size and num_element. Add condition to make sure the input element_size <= 4K and num_element <= 1K.
How to fix
- Linux Linux359653edd5374fbba28f93043554dcc494aee85f, 9e16c8bf9aebf629344cfd4cd5e3dc7d8c3f7d82 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 2f509fe6a42cda845890273fe759fb7ba9edad97 ≤ v < 359653edd5374fbba28f93043554dcc494aee85f, 2f509fe6a42cda845890273fe759fb7ba9edad97 ≤ v < 9e16c8bf9aebf629344cfd4cd5e3dc7d8c3f7d82, 6.18 | 359653edd5374fbba28f93043554dcc494aee85f, 9e16c8bf9aebf629344cfd4cd5e3dc7d8c3f7d82 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.