CVE-2025-68328
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-12-22

Last updated on: 2025-12-23

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix bug in saving controller data Fix the incorrect usage of platform_set_drvdata and dev_set_drvdata. They both are of the same data and overrides each other. This resulted in the rmmod of the svc driver to fail and throw a kernel panic for kthread_stop and fifo free.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-22
Last Modified
2025-12-23
Generated
2026-06-16
AI Q&A
2025-12-23
EPSS Evaluated
2026-06-15
NVD
CVE-2025-68328
EUVD
EUVD-2025-204721
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel's stratix10-svc firmware involved incorrect usage of platform_set_drvdata and dev_set_drvdata functions. Both functions were used with the same data, causing them to override each other. This bug led to failures when removing the svc driver module (rmmod), resulting in a kernel panic during kthread_stop and fifo free operations.

Impact Analysis

The vulnerability can cause the svc driver removal process to fail, leading to a kernel panic. This can result in system instability or crashes when attempting to unload the driver, potentially affecting system reliability and uptime.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-68328. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart