PT-2025-51650
CVE-2025-68237
·
Published
2025-12-16
·
Updated
2026-10-13
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An integer overflow issue exists in the mtdchar driver related to read/write ioctls. The
req.start and req.len variables, received from the user, can cause an integer overflow during addition. Specifically, while the high 32 bits of req.len are masked, req.start can reach its maximum value, leading to a potential overflow. The check add overflow() function has been implemented to address this issue.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾