Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68237

In the Linux kernel, the following vulnerability has been resolved: mtdchar: fix integer overflow in read/write ioctls The "req.start" and "req.len" variables are u64 values that come from the user at the start of the function. We mask away the high 32 bits of "req.len" so that's capped at U32_MAX but the "req.start" variable can go up to U64_MAX which means that the addition can still integer overflow. Use check_add_overflow() to fix this bug.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8373cb6c686bb163d825753e7636112272d29546d6e7c5451a0de35a47ad3d42
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/mtd/mtdchar.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f37efdd97fd1ec3e0d0f1eec279c8279e28f981e","status":"affected","version":"6420ac0af95dbcb2fd8452e2d551ab50e1bbad83","versionType":"git"},{"lessThan":"457376c6fbf0c69326a9bf1f72416225f681192b","status":"affected","version":"6420ac0af95dbcb2fd8452e2d551ab50e1bbad83","versionType":"git"},{"lessThan":"eb9361484814fb12f3b7544b33835ea67d7a6a97","status":"affected","version":"6420ac0af95dbcb2fd8452e2…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/mtd/mtdchar.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.17"},{"lessThan":"5.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.159","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.118","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.60","versionType":"semver"},{"lessThanOr…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/mtd/mtdchar.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f37efdd97fd1ec3e0d0f1eec279c8279e28f981e","status":"affected","version":"6420ac0af95dbcb2fd8452e2d551ab50e1bbad83","versionType":"git"},{"lessThan":"457376c6fbf0c69326a9bf1f72416225f681192b","status":"affected","version":"6420ac0af95dbcb2fd8452e2d551ab50e1bbad83","versionType":"git"},{"lessThan":"eb9361484814fb12f3b7544b33835ea67d7a6a97","status":"affected","version":"6420ac0af95dbcb2fd8452e2…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/mtd/mtdchar.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.17"},{"lessThan":"5.17","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.159","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.118","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.60","versionType":"semver"},{"lessThanOr…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/affected/1

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/37944f4f8199cd153fef74e95ca268020162f212"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/457376c6fbf0c69326a9bf1f72416225f681192b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/e4185bed738da755b191aa3f2e16e8b48450e1b8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/eb9361484814fb12f3b7544b33835ea67d7a6a97"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/f37efdd97fd1ec3e0d0f1eec279c8279e28f981e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3b8974324472b044a11e154eebc1c88365a9acfbd8f5d9cf433b564bba8eec34 · sha256:c620499e47958e58… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer