CVE-2025-68303: platform/x86: intel: punit_ipc: fix memory corruption
Vulnerability summary
CVE-2025-68303 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.7% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 43 · Related 40Timeline
- 16-12-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corruption This passes the address of the pointer "&punit_ipcdev" when the intent was to pass the pointer itself "punit_ipcdev" (without the ampersand). This means that the: complete(&ipcdev->cmd_complete); in intel_punit_ioc() will write to a wrong memory address corrupting it.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.14%
Chance of exploitation in the next 30 days
Percentile
4%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.14% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu156 products
- linuxAll versions (No fix recorded) | < 5.15.0-173.183 | < 6.8.0-106.106 | < 6.17.0-19.19
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1103.110 | < 6.8.0-1050.53 | < 6.17.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.11-1
Linux1 product
- linux≥ fdca4f16f57da76a8e68047923588a87d1c01f0a, < 15d560cdf5b36c51fffec07ac2a983ab3bff4cb2 | ≥ fdca4f16f57da76a8e68047923588a87d1c01f0a, < 46e9d6f54184573dae1dcbcf6685a572ba6f4480 | ≥ fdca4f16f57da76a8e68047923588a87d1c01f0a, < 3e7442c5802146fd418ba3f68dcb9ca92b5cec83 | ≥ fdca4f16f57da76a8e68047923588a87d1c01f0a, < a21615a4ac6fecbb586d59fe2206b63501021789 | ≥ fdca4f16f57da76a8e68047923588a87d1c01f0a, < c2ee6d38996775a19bfdf20cb01a9b8698cb0baa | ≥ fdca4f16f57da76a8e68047923588a87d1c01f0a, < 9b9c0adbc3f8a524d291baccc9d0c04097fb4869 | 4.5
3 vendors · 158 products
