Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68338

In the Linux kernel, the following vulnerability has been resolved: net: dsa: microchip: Don't free uninitialized ksz_irq If something goes wrong at setup, ksz_irq_free() can be called on uninitialized ksz_irq (for example when ksz_ptp_irq_setup() fails). It leads to freeing uninitialized IRQ numbers and/or domains. Use dsa_switch_for_each_user_port_continue_reverse() in the error path to iterate only over the fully initialized ports.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:23fc94c24d7eccf332842ba55c9a11982ccec17ede398576383da660feef5e2b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/dsa/microchip/ksz_common.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.61","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.18","versionType":"original_com…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9079158ef2556c9d55a9d56d5527f81ab0349aef3fce26cd8a09a9ca8e9476cb · sha256:6fe6569b1d38858a… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/dsa/microchip/ksz_common.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9428654c827fa8d38b898135d26d39ee2d544246","status":"affected","version":"cc13ab18b201ab630f03511060ba289b70052959","versionType":"git"},{"lessThan":"32abbcf4379a0f851d7eb9d4389e7bf5c64bf6c0","status":"affected","version":"cc13ab18b201ab630f03511060ba289b70052959","versionType":"git"},{"lessThan":"25b62cc5b22c45face094ae3e8717258e46d1d19","status":"affected","version":"cc13ab1…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9079158ef2556c9d55a9d56d5527f81ab0349aef3fce26cd8a09a9ca8e9476cb · sha256:6fe6569b1d38858a… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/dsa/microchip/ksz_common.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.3"},{"lessThan":"6.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.61","versionType":"semver"},{"lessThanOrEqual":"6.17.*","status":"unaffected","version":"6.17.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.18","versionType":"original_com…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9079158ef2556c9d55a9d56d5527f81ab0349aef3fce26cd8a09a9ca8e9476cb · sha256:6fe6569b1d38858a… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/dsa/microchip/ksz_common.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"9428654c827fa8d38b898135d26d39ee2d544246","status":"affected","version":"cc13ab18b201ab630f03511060ba289b70052959","versionType":"git"},{"lessThan":"32abbcf4379a0f851d7eb9d4389e7bf5c64bf6c0","status":"affected","version":"cc13ab18b201ab630f03511060ba289b70052959","versionType":"git"},{"lessThan":"25b62cc5b22c45face094ae3e8717258e46d1d19","status":"affected","version":"cc13ab1…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:9079158ef2556c9d55a9d56d5527f81ab0349aef3fce26cd8a09a9ca8e9476cb · sha256:6fe6569b1d38858a… · /containers/cna/affected/0

Source references

3 source assertions
{"url":"https://git.kernel.org/stable/c/25b62cc5b22c45face094ae3e8717258e46d1d19"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9079158ef2556c9d55a9d56d5527f81ab0349aef3fce26cd8a09a9ca8e9476cb · sha256:6fe6569b1d38858a… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/32abbcf4379a0f851d7eb9d4389e7bf5c64bf6c0"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9079158ef2556c9d55a9d56d5527f81ab0349aef3fce26cd8a09a9ca8e9476cb · sha256:6fe6569b1d38858a… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/9428654c827fa8d38b898135d26d39ee2d544246"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:9079158ef2556c9d55a9d56d5527f81ab0349aef3fce26cd8a09a9ca8e9476cb · sha256:6fe6569b1d38858a… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer