CVE Explorer

CVE-2025-68750

In the Linux kernel, the following vulnerability has been resolved: usb: potential integer overflow in usbg_make_tpg() The variable tpgt in usbg_make_tpg() is defined as unsigned long and is assigned to tpgt->tport_tpgt, which is defined as u16. This may cause an integer overflow when tpgt is greater than USHRT_MAX (65535). I haven't tried to trigger it myself, but it is possible to trigger it by calling usbg_make_tpg() with a large value for tpgt. I modified the type of tpgt to match tpgt->t

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:8e5e38fe2b9c0aa2c97e3cbf9c33e0b18b916bc7a4963c32d411f4808c2fbe6f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_tcm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.5"},{"lessThan":"3.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.296","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.240","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.187","versionType":"semver…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/function/f_tcm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0861b9cb2ff519b7c5a3b1dd52a343e18c4efb24","status":"affected","version":"c52661d60f636d17e26ad834457db333bd1df494","versionType":"git"},{"lessThan":"603a83e5fee38a950bfcfb2f36449311fa00a474","status":"affected","version":"c52661d60f636d17e26ad834457db333bd1df494","versionType":"git"},{"lessThan":"6f77e344515b5258edb3988188311464209b1c7c","status":"affected","version":"c52661d60f…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/affected/1

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/0861b9cb2ff519b7c5a3b1dd52a343e18c4efb24"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/153874010354d050f62f8ae25cbb960c17633dc5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/358d5ba08f1609c34a054aed88c431844d09705a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/603a83e5fee38a950bfcfb2f36449311fa00a474"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/620a5e1e84a3a7004270703a118d33eeb1c0f368"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/6722e080b5b39ab7471386c73d0c1b39572f943c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/6f77e344515b5258edb3988188311464209b1c7c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/a33f507f36d5881f602dab581ab0f8d22b49762c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2ad7ce7bd40de144e879a3c62cdddf62ac9a0956500044a3004091060ee90d62 · sha256:58e794b0e76e1715… · /containers/cna/references/4

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer