CVE-2025-68308: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers
Vulnerability summary
CVE-2025-68308 is a medium (CVSS 5.1) vulnerability in linux. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.8% of scored vulnerabilities.
Not severe (CVSS 5.1, physical access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 42 · Related 39Timeline
- 16-12-2025PublishedVulnerability first disclosed.
- 11-05-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: can: kvaser_usb: leaf: Fix potential infinite loop in command parsers The `kvaser_usb_leaf_wait_cmd()` and `kvaser_usb_leaf_read_bulk_callback` functions contain logic to zero-length commands. These commands are used to align data to the USB endpoint's wMaxPacketSize boundary. The driver attempts to skip these placeholders by aligning the buffer position `pos` to the next packet boundary using `round_up()` function. However, if zero-length command is found exactly on a packet boundary (i.e., `pos` is a multiple of wMaxPacketSize, including 0), `round_up` function will return the unchanged value of `pos`. This prevents `pos` to be increased, causing an infinite loop in the parsing logic. This patch fixes this in the function by using `pos + 1` instead. This ensures that even if `pos` is on a boundary, the calculation is based on `pos + 1`, forcing `round_up()` to always return the next aligned boundary.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
0.19%
Chance of exploitation in the next 30 days
Percentile
9%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.19% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: physical access, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu152 products
- linuxAll versions (No fix recorded) | < 5.15.0-173.183 | < 6.8.0-106.106 | < 6.17.0-19.19
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1103.110 | < 6.8.0-1050.53 | < 6.17.0-1009.9
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.11-1
Linux1 product
- linux≥ 7259124eac7d1b76b41c7a9cb2511a30556deebe, < 58343e0a4d43699f0e2f5b169384bbe4c0217add | ≥ 7259124eac7d1b76b41c7a9cb2511a30556deebe, < 69c7825df64e24dc15d31631a1fc9145324b1345 | ≥ 7259124eac7d1b76b41c7a9cb2511a30556deebe, < 028e89c7e8b4346302e88df01cc50e0a1f05791a | ≥ 7259124eac7d1b76b41c7a9cb2511a30556deebe, < e9dd83a75a7274edef21682c823bf0b66d7b6b7f | ≥ 7259124eac7d1b76b41c7a9cb2511a30556deebe, < 0897cea266e39166a36111059ba147192b36592f | ≥ 7259124eac7d1b76b41c7a9cb2511a30556deebe, < bd8135a560cf6e64f0b98ed4daadf126a38f7f48 | ≥ 7259124eac7d1b76b41c7a9cb2511a30556deebe, < 0c73772cd2b8cc108d5f5334de89ad648d89b9ec | 4.19
3 vendors · 154 products
