Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68362

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() The rtl8187_rx_cb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not validate if the received packet (skb->len from urb->actual_length) is large enough to contain this header. If a truncated packet is received, this will lead to a buffer underflow, reading memory before the start of the
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f7087723ebfbe774ce32f9a65a8363ab26ec8b7a8cc7ed5d3e3fbb6b8168e7bd
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160",…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"118e12bf3e4288cf845cd3759bd9d4c99f91aab5","status":"affected","version":"6f7853f3cbe457067e9fe05461f56c7ea4ac488c","versionType":"git"},{"lessThan":"6a96bd0d94305fd04a6ac64446ec113bae289384","status":"affected","version":"6f7853f3cbe457067e9fe05461f56c7ea4ac488c","versionType":"git"},{"lessThan":"e2f3ea15e804607e0a4a34a2f6c331c8750b68bc","status":"affected","versi…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.27"},{"lessThan":"2.6.27","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160",…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/net/wireless/realtek/rtl818x/rtl8187/dev.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"118e12bf3e4288cf845cd3759bd9d4c99f91aab5","status":"affected","version":"6f7853f3cbe457067e9fe05461f56c7ea4ac488c","versionType":"git"},{"lessThan":"6a96bd0d94305fd04a6ac64446ec113bae289384","status":"affected","version":"6f7853f3cbe457067e9fe05461f56c7ea4ac488c","versionType":"git"},{"lessThan":"e2f3ea15e804607e0a4a34a2f6c331c8750b68bc","status":"affected","versi…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/118e12bf3e4288cf845cd3759bd9d4c99f91aab5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/4758770a673c60d8f615809304d72e1432fa6355"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/5ebf0fe7eaef9f6173a4c6ea77c5353e21645d15"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/638d4148e166d114a4cd7becaae992ce1a815ed8"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/6a96bd0d94305fd04a6ac64446ec113bae289384"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/b647d2574e4583c2e3b0ab35568f60c88e910840"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/dc153401fb26c1640a2b279c47b65e1c416af276"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/e2f3ea15e804607e0a4a34a2f6c331c8750b68bc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a5ae33ae846c9d2a94a220c21798b447123302b4ca080bace444612509af7f26 · sha256:5f4c926e4dc611c8… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer