CVE-2025-68362: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()
In the Linux kernel, the following vulnerability has been resolved:
wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187rxcb()
The rtl8187rxcb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not validate if the received packet (skb->len from urb->actuallength) is large enough to contain this header.
If a truncated packet is received, this will lead to a buffer underflow, reading memory before the start of the skb data area, and causing a kernel panic.
Add length checks for both rtl8187 and rtl8187b descriptor headers before attempting to access them, dropping the packet cleanly if the check fails.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68362?
CVE-2025-68362 has been rated as a high-severity vulnerability due to its potential to cause buffer underflow in the rtl8187 driver.
How do I fix CVE-2025-68362?
To fix CVE-2025-68362, you should update the Linux kernel to the latest version that includes the patched rtl8187 driver.
Which versions of the Linux kernel are affected by CVE-2025-68362?
CVE-2025-68362 affects versions of the Linux kernel that include the vulnerable rtl8187 driver prior to the fix.
What are the implications of CVE-2025-68362?
The implications of CVE-2025-68362 include potential denial of service or remote code execution vulnerabilities that could affect device connectivity.
Is CVE-2025-68362 specific to certain hardware?
Yes, CVE-2025-68362 specifically impacts devices utilizing the rtl8187 wireless driver in the Linux kernel.