CVE-2025-68303

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory corruption issue exists in the Linux kernel related to Intel Punit IPC functionality. The code incorrectly passes the address of a pointer instead of the pointer itself to a function, leading to data corruption when a completion function attempts to write to an incorrect memory address. The vulnerable code is located in the intel punit ioc() function, specifically with the complete(&ipcdev->cmd complete) call. The issue stems from passing &punit ipcdev instead of punit ipcdev.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.