CVE-2025-68338

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to DSA (Distributed Switch Architecture) and Microchip network devices. Specifically, the ksz irq free() function may be called on an uninitialized ksz irq structure during setup failures, such as those occurring within ksz ptp irq setup(). This can lead to the freeing of uninitialized IRQ numbers and/or domains. The issue is addressed by utilizing dsa switch for each user port continue reverse() in the error path to iterate only over fully initialized ports.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.