CVE-2025-68192— Linux kernel 安全漏洞
Possible ATT&CK Techniques 1AI
T1498 · Network Denial of ServiceAffected Version Matrix 18
| ベンダー | プロダクト | Version Range | ステータス |
|---|---|---|---|
| Linux | Linux | c6adf77953bcec0ad63d7782479452464e50f7a3< d693c47fb902b988f5752182e4f7fbde5e6dcaf9 | affected |
c6adf77953bcec0ad63d7782479452464e50f7a3< 0aabccdcec1f4a36f95829ea2263f845bbc77223 | affected | ||
c6adf77953bcec0ad63d7782479452464e50f7a3< 4e6b9004f01d0fef5b19778399bc5bf55f8c2d71 | affected | ||
c6adf77953bcec0ad63d7782479452464e50f7a3< bf527b80b80a282ab5bf1540546211fc35e5cd42 | affected | ||
c6adf77953bcec0ad63d7782479452464e50f7a3< dd03780c29f87c26c0e0bb7e0db528c8109461fb | affected | ||
c6adf77953bcec0ad63d7782479452464e50f7a3< ae811175cea35b03ac6d7c910f43a82a43b9c3b3 | affected | ||
c6adf77953bcec0ad63d7782479452464e50f7a3< 8ab3b8f958d861a7f725a5be60769106509fbd69 | affected | ||
c6adf77953bcec0ad63d7782479452464e50f7a3< e120f46768d98151ece8756ebd688b0e43dc8b29 | affected | ||
| … +10 more rows | |||
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-68192の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup Raw IP packets have no MAC header, leaving skb->mac_header uninitialized. This can trigger kernel panics on ARM64 when xfrm or other subsystems access the offset due to strict alignment checks. Initialize the MAC header to prevent such crashes. This can trigger kernel panics on ARM when running IPsec over the qmimux0 interface. Example trace: Internal error: Oops: 000000009600004f [#1] SMP CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.34-gbe78e49cb433 #1 Hardware name: LS1028A RDB Board (DT) pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : xfrm_input+0xde8/0x1318 lr : xfrm_input+0x61c/0x1318 sp : ffff800080003b20 Call trace: xfrm_input+0xde8/0x1318 xfrm6_rcv+0x38/0x44 xfrm6_esp_rcv+0x48/0xa8 ip6_protocol_deliver_rcu+0x94/0x4b0 ip6_input_finish+0x44/0x70 ip6_input+0x44/0xc0 ipv6_rcv+0x6c/0x114 __netif_receive_skb_one_core+0x5c/0x8c __netif_receive_skb+0x18/0x60 process_backlog+0x78/0x17c __napi_poll+0x38/0x180 net_rx_action+0x168/0x2f0
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未初始化MAC头偏移量，可能导致内核崩溃。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2025-68192の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-68192のインテリジェンス情報
请登录查看更多情报信息。
CVE-2025-68192 其他参考 (8)
Same Patch Batch · Linux · 2025-12-16 · 157 CVEs total
| CVE-2025-68263 | 9.8 CRITICAL | ksmbd: ipc: fix use-after-free in ipc_msg_send_request |
| CVE-2025-68260 | rust_binder: fix race condition on death_list | |
| CVE-2025-68251 | erofs: avoid infinite loops due to corrupted subpage compact indexes | |
| CVE-2025-68252 | misc: fastrpc: Fix dma_buf object leak in fastrpc_map_lookup | |
| CVE-2025-68253 | mm: don't spin in add_stack_record when gfp flags don't allow | |
| CVE-2025-68254 | staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing | |
| CVE-2025-68255 | staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing | |
| CVE-2025-68256 | staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser | |
| CVE-2025-68257 | comedi: check device's attached status in compat ioctls | |
| CVE-2025-68258 | comedi: multiq3: sanitize config options in multiq3_attach() | |
| CVE-2025-68259 | KVM: SVM: Don't skip unrelated instruction if INT3/INTO is replaced | |
| CVE-2025-68265 | nvme: fix admin request_queue lifetime | |
| CVE-2025-68283 | libceph: replace BUG_ON with bounds check for map->max_osd | |
| CVE-2025-68282 | usb: gadget: udc: fix use-after-free in usb_gadget_state_work | |
| CVE-2025-68281 | ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list | |
| CVE-2025-68266 | bfs: Reconstruct file type when loading from disk | |
| CVE-2025-68262 | crypto: zstd - fix double-free in per-CPU stream cleanup | |
| CVE-2025-68261 | ext4: add i_data_sem protection in ext4_destroy_inline_data_nolock() | |
| CVE-2025-68250 | hung_task: fix warnings caused by unaligned lock pointers | |
| CVE-2025-68264 | ext4: refresh inline data size before write operations |
Showing 20 of 157 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Linux
- CVE-2026-64600
xfs: resample the data fork mapping after cycling ILOCK - CVE-2026-64206
Bluetooth: L2CAP: cancel pending_rx_work before taking conn- - CVE-2026-64207
net/sched: dualpi2: fix GSO backlog accounting - CVE-2026-64205
i2c: i801: fix hardware state machine corruption in error pa - CVE-2026-64192
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM i
同じベンダー: Linux
- CVE-2026-64600
xfs: resample the data fork mapping after cycling ILOCK - CVE-2026-64206
Bluetooth: L2CAP: cancel pending_rx_work before taking conn- - CVE-2026-64207
net/sched: dualpi2: fix GSO backlog accounting - CVE-2026-64205
i2c: i801: fix hardware state machine corruption in error pa - CVE-2026-64192
bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM i
V. CVE-2025-68192へのコメント
まだコメントはありません