Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68217

In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker - fix potential out-of-bounds access In the pegasus_notetaker driver, the pegasus_probe() function allocates the URB transfer buffer using the wMaxPacketSize value from the endpoint descriptor. An attacker can use a malicious USB descriptor to force the allocation of a very small buffer. Subsequently, if the device sends an interrupt packet with a specific pattern (e.g., where the first byte is 0x80 o
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:10c9e1a0fff9cc6ae64a7e68afea22015612cd05c15f3dbab12686b66a1c72e8
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/input/tablet/pegasus_notetaker.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.8"},{"lessThan":"4.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.302","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","versionType":"s…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/input/tablet/pegasus_notetaker.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c4e746651bd74c38f581e1cf31651119a94de8cd","status":"affected","version":"1afca2b66aac7ac262d3511c68725e9e7053b40f","versionType":"git"},{"lessThan":"36bc92b838ff72f62f2c17751a9013b29ead2513","status":"affected","version":"1afca2b66aac7ac262d3511c68725e9e7053b40f","versionType":"git"},{"lessThan":"015b719962696b793997e8deefac019f816aca77","status":"affected","version":"1afca…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/input/tablet/pegasus_notetaker.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.8"},{"lessThan":"4.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.302","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","versionType":"s…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/input/tablet/pegasus_notetaker.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c4e746651bd74c38f581e1cf31651119a94de8cd","status":"affected","version":"1afca2b66aac7ac262d3511c68725e9e7053b40f","versionType":"git"},{"lessThan":"36bc92b838ff72f62f2c17751a9013b29ead2513","status":"affected","version":"1afca2b66aac7ac262d3511c68725e9e7053b40f","versionType":"git"},{"lessThan":"015b719962696b793997e8deefac019f816aca77","status":"affected","version":"1afca…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/015b719962696b793997e8deefac019f816aca77"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/084264e10e2ae8938a54355123ad977eb9df56d6"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/36bc92b838ff72f62f2c17751a9013b29ead2513"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/69aeb507312306f73495598a055293fa749d454e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/763c3f4d2394a697d14af1335d3bb42f05c9409f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/9ab67eff6d654e34ba6da07c64761aa87c2a3c26"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/c4e746651bd74c38f581e1cf31651119a94de8cd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/d344ea1baf1946c90f0cd6f9daeb5f3e0a0ca479"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:1cf521d2fe5abb7db1610711a88afee68074933fcdf3a2ea334c97b4283a8cc5 · sha256:ccf35e0ad26796fe… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer