[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-68301":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":14,"duplicates":127,"related":128,"reserved_at":9,"published_at":142,"modified_at":143,"state":144,"summary":145,"references_raw":149,"kevs":180,"epss":181,"epss_history":184,"metrics":458,"affected":459},"CVE-2025-68301","In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atlantic: fix fragment overflow handling in RX path\n\nThe atlantic driver can receive packets with more than MAX_SKB_FRAGS (17)\nfragments when handling large multi-descriptor packets. This causes an\nout-of-bounds write in skb_add_rx_frag_netmem() leading to kernel panic.\n\nThe issue occurs because the driver doesn't check the total number of\nfragments before calling skb_add_rx_frag(). When a packet requires more\nthan MAX_SKB_FRAGS fragments, the fragment index exceeds the array bounds.\n\nFix by assuming there will be an extra frag if buff->len > AQ_CFG_RX_HDR_SIZE,\nthen all fragments are accounted for. And reusing the existing check to\nprevent the overflow earlier in the code path.\n\nThis crash occurred in production with an Aquantia AQC113 10G NIC.\n\nStack trace from production environment:\n```\nRIP: 0010:skb_add_rx_frag_netmem+0x29/0xd0\nCode: 90 f3 0f 1e fa 0f 1f 44 00 00 48 89 f8 41 89\nca 48 89 d7 48 63 ce 8b 90 c0 00 00 00 48 c1 e1 04 48 01 ca 48 03 90\nc8 00 00 00 \u003C48> 89 7a 30 44 89 52 3c 44 89 42 38 40 f6 c7 01 75 74 48\n89 fa 83\nRSP: 0018:ffffa9bec02a8d50 EFLAGS: 00010287\nRAX: ffff925b22e80a00 RBX: ffff925ad38d2700 RCX:\nfffffffe0a0c8000\nRDX: ffff9258ea95bac0 RSI: ffff925ae0a0c800 RDI:\n0000000000037a40\nRBP: 0000000000000024 R08: 0000000000000000 R09:\n0000000000000021\nR10: 0000000000000848 R11: 0000000000000000 R12:\nffffa9bec02a8e24\nR13: ffff925ad8615570 R14: 0000000000000000 R15:\nffff925b22e80a00\nFS: 0000000000000000(0000)\nGS:ffff925e47880000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffff9258ea95baf0 CR3: 0000000166022004 CR4:\n0000000000f72ef0\nPKRU: 55555554\nCall Trace:\n\u003CIRQ>\naq_ring_rx_clean+0x175/0xe60 [atlantic]\n? aq_ring_rx_clean+0x14d/0xe60 [atlantic]\n? aq_ring_tx_clean+0xdf/0x190 [atlantic]\n? kmem_cache_free+0x348/0x450\n? aq_vec_poll+0x81/0x1d0 [atlantic]\n? __napi_poll+0x28/0x1c0\n? net_rx_action+0x337/0x420\n```\n\nChanges in v4:\n- Add Fixes: tag to satisfy patch validation requirements.\n\nChanges in v3:\n- Fix by assuming there will be an extra frag if buff->len > AQ_CFG_RX_HDR_SIZE,\n  then all fragments are accounted for.",null,[],[],[],[],[15,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125],{"_key":16},"RHSA-2026:1703",{"_key":18},"RHSA-2026:1886",{"_key":20},"RHSA-2026:1909",{"_key":22},"RHSA-2026:1946",{"_key":24},"RHSA-2026:2573",{"_key":26},"RHSA-2026:2577",{"_key":28},"SUSE-SU-2026:0447-1",{"_key":30},"SUSE-SU-2026:0472-1",{"_key":32},"SUSE-SU-2026:0587-1",{"_key":34},"SUSE-SU-2026:20207-1",{"_key":36},"SUSE-SU-2026:20220-1",{"_key":38},"SUSE-SU-2026:20228-1",{"_key":40},"SUSE-SU-2026:20477-1",{"_key":42},"SUSE-SU-2026:20498-1",{"_key":44},"OPENSUSE-SU-2026:20145-1",{"_key":46},"SUSE-SU-2026:20845-1",{"_key":48},"RHSA-2026:2490",{"_key":50},"SUSE-SU-2026:20876-1",{"_key":52},"RHSA-2026:0759",{"_key":54},"RHSA-2026:0760",{"_key":56},"RHSA-2026:1879",{"_key":58},"MGASA-2026-0017",{"_key":60},"MGASA-2026-0018",{"_key":62},"RHSA-2026:2664",{"_key":64},"DEBIAN-CVE-2025-68301",{"_key":66},"USN-8095-1",{"_key":68},"USN-8095-2",{"_key":70},"USN-8095-3",{"_key":72},"USN-8095-4",{"_key":74},"USN-8095-5",{"_key":76},"USN-8100-1",{"_key":78},"USN-8125-1",{"_key":80},"USN-8165-1",{"_key":82},"USN-8096-1",{"_key":84},"USN-8096-2",{"_key":86},"USN-8096-3",{"_key":88},"USN-8096-4",{"_key":90},"USN-8096-5",{"_key":92},"USN-8116-1",{"_key":94},"USN-8141-1",{"_key":96},"USN-8163-1",{"_key":98},"USN-8163-2",{"_key":100},"RHSA-2026:1727",{"_key":102},"RHSA-2026:2535",{"_key":104},"USN-8126-1",{"_key":106},"USN-8243-1",{"_key":108},"RHSA-2026:1143",{"_key":110},"RHSA-2026:1690",{"_key":112},"UBUNTU-CVE-2025-68301",{"_key":114},"USN-8094-1",{"_key":116},"USN-8094-2",{"_key":118},"USN-8094-3",{"_key":120},"USN-8094-4",{"_key":122},"USN-8094-5",{"_key":124},"USN-8152-1",{"_key":126},"USN-8261-1",[],[129,130,131,132,133,134,135,136,137,138,139,140,141],{"_key":28},{"_key":30},{"_key":32},{"_key":34},{"_key":36},{"_key":38},{"_key":40},{"_key":42},{"_key":44},{"_key":46},{"_key":50},{"_key":58},{"_key":60},"2025-12-16T15:06:19.688Z","2026-05-23T16:02:37.030Z","Deferred",{"cisa_kev":146,"cisa_ransomware":146,"cisa_vendor":9,"epss_severity":147,"epss_score":148,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":144},false,"low",0.00076,[150,156,160,164,168,172,176],{"url":151,"sources":152,"tags":155},"https://git.kernel.org/stable/c/34147477eeab24077fcfe9649e282849347d760c",[153,154],"cve.org","nvd",[],{"url":157,"sources":158,"tags":159},"https://git.kernel.org/stable/c/b0c4d5135b04ea100988e2458c98f2d8564cda16",[153,154],[],{"url":161,"sources":162,"tags":163},"https://git.kernel.org/stable/c/5d6051ea1b0417ae2f06a8440d22e48fbc8f8997",[153,154],[],{"url":165,"sources":166,"tags":167},"https://git.kernel.org/stable/c/3be37c3c96b16462394fcb8e15e757c691377038",[153,154],[],{"url":169,"sources":170,"tags":171},"https://git.kernel.org/stable/c/3fd2105e1b7e041cc24be151c9a31a14d5fc50ab",[153,154],[],{"url":173,"sources":174,"tags":175},"https://git.kernel.org/stable/c/64e47cd1fd631a21bf5a630cebefec6c8fc381cd",[153,154],[],{"url":177,"sources":178,"tags":179},"https://git.kernel.org/stable/c/5ffcb7b890f61541201461580bb6622ace405aec",[153,154],[],[],{"date":182,"score":148,"percentile":183},"2026-06-04",0.22883,[185,189,192,195,198,201,205,208,210,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,283,287,290,293,296,299,302,305,308,311,314,316,319,322,325,328,331,334,337,340,343,346,349,353,356,359,362,365,368,371,374,377,380,383,386,389,393,396,399,402,405,408,411,414,417,420,423,426,429,431,434,437,440,443,446,449,452,455],{"date":186,"score":187,"percentile":188},"2025-12-17",0.00024,0.05963,{"date":190,"score":187,"percentile":191},"2025-12-18",0.06008,{"date":193,"score":187,"percentile":194},"2025-12-19",0.05995,{"date":196,"score":187,"percentile":197},"2025-12-20",0.0599,{"date":199,"score":187,"percentile":200},"2025-12-21",0.05982,{"date":202,"score":203,"percentile":204},"2025-12-22",0.00032,0.08818,{"date":206,"score":203,"percentile":207},"2025-12-23",0.08804,{"date":209,"score":203,"percentile":204},"2025-12-24",{"date":211,"score":203,"percentile":212},"2025-12-25",0.08889,{"date":214,"score":203,"percentile":215},"2025-12-26",0.08888,{"date":217,"score":203,"percentile":218},"2025-12-27",0.08865,{"date":220,"score":203,"percentile":221},"2025-12-28",0.0889,{"date":223,"score":203,"percentile":224},"2025-12-29",0.08863,{"date":226,"score":203,"percentile":227},"2025-12-30",0.08859,{"date":229,"score":203,"percentile":230},"2025-12-31",0.08905,{"date":232,"score":203,"percentile":233},"2026-01-01",0.0897,{"date":235,"score":203,"percentile":236},"2026-01-02",0.08972,{"date":238,"score":203,"percentile":239},"2026-01-03",0.08963,{"date":241,"score":203,"percentile":242},"2026-01-04",0.08894,{"date":244,"score":203,"percentile":245},"2026-01-05",0.08862,{"date":247,"score":203,"percentile":248},"2026-01-06",0.08845,{"date":250,"score":203,"percentile":251},"2026-01-07",0.08876,{"date":253,"score":203,"percentile":254},"2026-01-08",0.0895,{"date":256,"score":203,"percentile":257},"2026-01-09",0.08959,{"date":259,"score":203,"percentile":260},"2026-01-10",0.08961,{"date":262,"score":203,"percentile":263},"2026-01-11",0.08909,{"date":265,"score":203,"percentile":266},"2026-01-12",0.08893,{"date":268,"score":203,"percentile":269},"2026-01-13",0.0886,{"date":271,"score":203,"percentile":272},"2026-01-14",0.08904,{"date":274,"score":203,"percentile":275},"2026-01-15",0.08903,{"date":277,"score":203,"percentile":278},"2026-01-16",0.08938,{"date":280,"score":281,"percentile":282},"2026-01-17",0.00035,0.10001,{"date":284,"score":285,"percentile":286},"2026-01-18",0.00061,0.19265,{"date":288,"score":285,"percentile":289},"2026-01-19",0.19205,{"date":291,"score":285,"percentile":292},"2026-01-20",0.19191,{"date":294,"score":285,"percentile":295},"2026-01-21",0.1916,{"date":297,"score":285,"percentile":298},"2026-01-22",0.19101,{"date":300,"score":285,"percentile":301},"2026-01-23",0.19201,{"date":303,"score":285,"percentile":304},"2026-01-24",0.19229,{"date":306,"score":285,"percentile":307},"2026-01-25",0.19156,{"date":309,"score":285,"percentile":310},"2026-01-26",0.19056,{"date":312,"score":285,"percentile":313},"2026-01-27",0.19047,{"date":315,"score":285,"percentile":313},"2026-01-28",{"date":317,"score":285,"percentile":318},"2026-01-29",0.19016,{"date":320,"score":285,"percentile":321},"2026-01-30",0.19027,{"date":323,"score":285,"percentile":324},"2026-01-31",0.19033,{"date":326,"score":285,"percentile":327},"2026-02-01",0.19057,{"date":329,"score":285,"percentile":330},"2026-02-02",0.19007,{"date":332,"score":285,"percentile":333},"2026-02-03",0.18984,{"date":335,"score":285,"percentile":336},"2026-02-04",0.1896,{"date":338,"score":285,"percentile":339},"2026-02-05",0.18989,{"date":341,"score":285,"percentile":342},"2026-02-06",0.1901,{"date":344,"score":285,"percentile":345},"2026-02-07",0.19024,{"date":347,"score":285,"percentile":348},"2026-02-08",0.18981,{"date":350,"score":351,"percentile":352},"2026-02-09",0.00051,0.15686,{"date":354,"score":351,"percentile":355},"2026-02-10",0.15601,{"date":357,"score":351,"percentile":358},"2026-02-11",0.15641,{"date":360,"score":351,"percentile":361},"2026-02-12",0.15668,{"date":363,"score":351,"percentile":364},"2026-02-13",0.15666,{"date":366,"score":351,"percentile":367},"2026-02-14",0.15599,{"date":369,"score":351,"percentile":370},"2026-02-15",0.15581,{"date":372,"score":351,"percentile":373},"2026-02-16",0.1554,{"date":375,"score":351,"percentile":376},"2026-02-17",0.15511,{"date":378,"score":351,"percentile":379},"2026-02-18",0.15719,{"date":381,"score":351,"percentile":382},"2026-02-19",0.15784,{"date":384,"score":351,"percentile":385},"2026-02-20",0.15783,{"date":387,"score":351,"percentile":388},"2026-02-21",0.15792,{"date":390,"score":391,"percentile":392},"2026-02-22",0.00053,0.16546,{"date":394,"score":391,"percentile":395},"2026-02-23",0.16512,{"date":397,"score":391,"percentile":398},"2026-02-24",0.16459,{"date":400,"score":391,"percentile":401},"2026-02-25",0.16432,{"date":403,"score":391,"percentile":404},"2026-02-26",0.16401,{"date":406,"score":391,"percentile":407},"2026-02-27",0.16413,{"date":409,"score":391,"percentile":410},"2026-02-28",0.16415,{"date":412,"score":391,"percentile":413},"2026-03-01",0.16438,{"date":415,"score":391,"percentile":416},"2026-03-02",0.1638,{"date":418,"score":391,"percentile":419},"2026-03-03",0.1634,{"date":421,"score":391,"percentile":422},"2026-03-04",0.16289,{"date":424,"score":391,"percentile":425},"2026-03-05",0.1631,{"date":427,"score":391,"percentile":428},"2026-03-06",0.16307,{"date":430,"score":391,"percentile":425},"2026-03-07",{"date":432,"score":391,"percentile":433},"2026-03-08",0.16275,{"date":435,"score":391,"percentile":436},"2026-03-09",0.16245,{"date":438,"score":391,"percentile":439},"2026-03-10",0.16238,{"date":441,"score":391,"percentile":442},"2026-03-11",0.16262,{"date":444,"score":391,"percentile":445},"2026-03-12",0.16323,{"date":447,"score":391,"percentile":448},"2026-03-13",0.16354,{"date":450,"score":391,"percentile":451},"2026-03-14",0.16353,{"date":453,"score":391,"percentile":454},"2026-03-15",0.1629,{"date":456,"score":391,"percentile":457},"2026-03-16",0.16256,[],[460],{"ecosystem":9,"name":461,"vendor":462,"product":462,"cpe_part":463,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":464},"Linux","linux","a",[465,472,476,480,483,486,489,492,494,498,502,506],{"version":466,"is_range":467,"range_type":153,"version_start":468,"version_start_type":469,"version_end":470,"version_end_type":471,"fixed_in":9},">= cd66ab20a8f84474564a68fffffd37d998f6c340, \u003C 34147477eeab24077fcfe9649e282849347d760c",true,"cd66ab20a8f84474564a68fffffd37d998f6c340","including","34147477eeab24077fcfe9649e282849347d760c","excluding",{"version":473,"is_range":467,"range_type":153,"version_start":474,"version_start_type":469,"version_end":475,"version_end_type":471,"fixed_in":9},">= 948ddbdc56636773401f2cb9c7a932eb9c43ccfd, \u003C b0c4d5135b04ea100988e2458c98f2d8564cda16","948ddbdc56636773401f2cb9c7a932eb9c43ccfd","b0c4d5135b04ea100988e2458c98f2d8564cda16",{"version":477,"is_range":467,"range_type":153,"version_start":478,"version_start_type":469,"version_end":479,"version_end_type":471,"fixed_in":9},">= 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f, \u003C 5d6051ea1b0417ae2f06a8440d22e48fbc8f8997","6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f","5d6051ea1b0417ae2f06a8440d22e48fbc8f8997",{"version":481,"is_range":467,"range_type":153,"version_start":478,"version_start_type":469,"version_end":482,"version_end_type":471,"fixed_in":9},">= 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f, \u003C 3be37c3c96b16462394fcb8e15e757c691377038","3be37c3c96b16462394fcb8e15e757c691377038",{"version":484,"is_range":467,"range_type":153,"version_start":478,"version_start_type":469,"version_end":485,"version_end_type":471,"fixed_in":9},">= 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f, \u003C 3fd2105e1b7e041cc24be151c9a31a14d5fc50ab","3fd2105e1b7e041cc24be151c9a31a14d5fc50ab",{"version":487,"is_range":467,"range_type":153,"version_start":478,"version_start_type":469,"version_end":488,"version_end_type":471,"fixed_in":9},">= 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f, \u003C 64e47cd1fd631a21bf5a630cebefec6c8fc381cd","64e47cd1fd631a21bf5a630cebefec6c8fc381cd",{"version":490,"is_range":467,"range_type":153,"version_start":478,"version_start_type":469,"version_end":491,"version_end_type":471,"fixed_in":9},">= 6aecbba12b5c90b26dc062af3b9de8c4b3a2f19f, \u003C 5ffcb7b890f61541201461580bb6622ace405aec","5ffcb7b890f61541201461580bb6622ace405aec",{"version":493,"is_range":146,"range_type":153,"version_start":493,"version_start_type":469,"version_end":493,"version_end_type":469,"fixed_in":9},"dd4fb02847e737cc38ca75e708b1a836fba45faf",{"version":495,"is_range":467,"range_type":153,"version_start":496,"version_start_type":469,"version_end":497,"version_end_type":471,"fixed_in":9},">= 5.10.118, \u003C 5.10.247","5.10.118","5.10.247",{"version":499,"is_range":467,"range_type":153,"version_start":500,"version_start_type":469,"version_end":501,"version_end_type":471,"fixed_in":9},">= 5.15.42, \u003C 5.15.197","5.15.42","5.15.197",{"version":503,"is_range":467,"range_type":153,"version_start":504,"version_start_type":469,"version_end":505,"version_end_type":471,"fixed_in":9},">= 5.17.10, \u003C 5.18","5.17.10","5.18",{"version":505,"is_range":146,"range_type":153,"version_start":505,"version_start_type":469,"version_end":505,"version_end_type":469,"fixed_in":9}]