CVE-2025-68192
A flaw in the Linux kernel's USB networking component causes the system to fail to properly initialize certain data headers. This error occurs when processing raw IP packets through specific interfaces.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Users running the Linux kernel on ARM64 hardware, specifically when using IPsec over the qmimux0 interface.
Real-world impact
An attacker could trigger a kernel panic, which causes the entire system to crash and become unavailable. This is particularly relevant for ARM64 systems running IPsec over the qmimux0 interface.
Why this severity
The critical score reflects that the vulnerability can be triggered remotely without authentication or user interaction, leading to a complete system crash.
What to do about it
- 01Apply the fix to the Linux kernel to ensure the MAC header offset is properly initialized in qmimux_rx_fixup.
NVD-referenced vendor advisory
Timeline
- Dec 16, 2025 · Dec 16, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Jul 30, 2026 · 6d agoAdvisory updatedThe NVD record was last revised.
- Jul 30, 2026 · 6d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/0aabccdcec1f4a36f9…
- git.kernel.org/stable/c/4e6b9004f01d0fef5b…
- git.kernel.org/stable/c/8ab3b8f958d861a7f7…
- git.kernel.org/stable/c/ae811175cea35b03ac…
- git.kernel.org/stable/c/bf527b80b80a282ab5…
- git.kernel.org/stable/c/d693c47fb902b988f5…
- git.kernel.org/stable/c/dd03780c29f87c26c0…
- git.kernel.org/stable/c/e120f46768d98151ec…