CVE-2025-68217

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The pegasus notetaker driver contains a flaw where the pegasus probe() function allocates a URB transfer buffer based on a potentially manipulated wMaxPacketSize value from a USB endpoint descriptor. An attacker can provide a malicious USB descriptor to force the allocation of a small buffer. The pegasus parse packet() function then processes incoming interrupt packets without verifying the allocated buffer size, leading to an out-of-bounds memory access if the packet contains a specific pattern, such as a first byte of 0x80 or 0x42.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.