CVE-2025-68303: platform/x86: intel: punit_ipc: fix memory corruption
In the Linux kernel, the following vulnerability has been resolved:
platform/x86: intel: punitipc: fix memory corruption
This passes the address of the pointer "&punitipcdev" when the intent was to pass the pointer itself "punitipcdev" (without the ampersand). This means that the:
complete(&ipcdev->cmdcomplete);
in intelpunitioc() will write to a wrong memory address corrupting it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68303?
CVE-2025-68303 has been classified as a high severity vulnerability due to its potential for memory corruption in the Linux kernel.
How do I fix CVE-2025-68303?
To fix CVE-2025-68303, update your Linux kernel to the latest version that includes the patch.
What component of the Linux kernel is affected by CVE-2025-68303?
CVE-2025-68303 affects the platform/x86 component, specifically related to the punit_ipc driver.
Is there any exploit available for CVE-2025-68303?
Currently, no public exploit has been reported for CVE-2025-68303, but the memory corruption could potentially be leveraged if not patched.
Who should be concerned about CVE-2025-68303?
Users and administrators of systems running the affected versions of the Linux kernel should be concerned about CVE-2025-68303.