CVE-2025-68799
Description
In the Linux kernel, the following vulnerability has been resolved: caif: fix integer underflow in cffrml_receive() The cffrml_receive() function extracts a length field from the packet header and, when FCS is disabled, subtracts 2 from this length without validating that len >= 2. If an attacker sends a malicious packet with a length field of 0 or 1 to an interface with FCS disabled, the subtraction causes an integer underflow. This can lead to memory exhaustion and kernel instability, potential information disclosure if padding contains uninitialized kernel memory. Fix this by validating that len >= 2 before performing the subtraction.
How to fix
- Linux Linuxf407f1c9f45bbf5c99fd80b3f3f4a94fdbe35691, c54091eec6fed19e94182aa05dd6846600a642f7, 785c7be6361630070790f6235b696da156ac71b3, f818cd472565f8b0c2c409b040e0121c5cf8592c, 4ec29714aa4e0601ea29d2f02b461fc0ac92c2c3, 21fdcc00656a60af3c7aae2dea8dd96abd35519c, 8a11ff0948b5ad09b71896b7ccc850625f9878d1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | b482cd2053e3b90a7b33a78c63cdb6badf2ec383 ≤ v < f407f1c9f45bbf5c99fd80b3f3f4a94fdbe35691, b482cd2053e3b90a7b33a78c63cdb6badf2ec383 ≤ v < c54091eec6fed19e94182aa05dd6846600a642f7, b482cd2053e3b90a7b33a78c63cdb6badf2ec383 ≤ v < 785c7be6361630070790f6235b696da156ac71b3, b482cd2053e3b90a7b33a78c63cdb6badf2ec383 ≤ v < f818cd472565f8b0c2c409b040e0121c5cf8592c, b482cd2053e3b90a7b33a78c63cdb6badf2ec383 ≤ v < 4ec29714aa4e0601ea29d2f02b461fc0ac92c2c3, b482cd2053e3b90a7b33a78c63cdb6badf2ec383 ≤ v < 21fdcc00656a60af3c7aae2dea8dd96abd35519c, b482cd2053e3b90a7b33a78c63cdb6badf2ec383 ≤ v < 8a11ff0948b5ad09b71896b7ccc850625f9878d1, 2.6.35 | f407f1c9f45bbf5c99fd80b3f3f4a94fdbe35691, c54091eec6fed19e94182aa05dd6846600a642f7, 785c7be6361630070790f6235b696da156ac71b3, f818cd472565f8b0c2c409b040e0121c5cf8592c, 4ec29714aa4e0601ea29d2f02b461fc0ac92c2c3, 21fdcc00656a60af3c7aae2dea8dd96abd35519c, 8a11ff0948b5ad09b71896b7ccc850625f9878d1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.