CVE-2025-68799

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer underflow issue exists in the cffrml receive() function when handling packets with FCS disabled. The function extracts a length field from the packet header and subtracts 2 from it without verifying that the length is greater than or equal to 2. An attacker can exploit this by sending a malicious packet with a length field of 0 or 1, causing an integer underflow. This can lead to memory exhaustion, kernel instability, and potential information disclosure if padding contains uninitialized kernel memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.