CVE-2025-68308

CVE-2025-68308 relates to a Linux kernel issue in kvaser_usb leaf parsing causing an infinite loop; however, the connected documents do not provide further technical details (affected version, exploitability, or patch specifics). Monitor for updates from the vendor/patch references.

CVE-2025-68308 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers

In the Linux kernel, the following vulnerability has been resolved: can: kvaserusb: leaf: Fix potential infinite loop in command parsers The kvaserusbleafwaitcmd and kvaserusbleafreadbulkcallback functions contain logic to zero-length commands. These commands are used to align data to the USB...

CVE-2025-68308 can: kvaser_usb: leaf: Fix potential infinite loop in command parsers

In the Linux kernel, the following vulnerability has been resolved: can: kvaserusb: leaf: Fix potential infinite loop in command parsers The kvaserusbleafwaitcmd and kvaserusbleafreadbulkcallback functions contain logic to zero-length commands. These commands are used to align data to the USB...

CVE-2025-68251 erofs: avoid infinite loops due to corrupted subpage compact indexes

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that clusterofs can be larger than lclustersize for !NONHEAD lclusters in...

CVE-2025-68251

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that clusterofs can be larger than lclustersize for !NONHEAD lclusters in...

CVE-2025-68251

CVE-2025-68251 pertains to the Linux kernel’s EROFS subsystem. The issue caused an infinite loop when handling corrupted subpage compact indexes due to a mis-ordered/incorrect bound that could allow clusterofs to exceed lclustersize for lclusters in non-head paths. The fix moves the check for ful...

CVE-2025-68251 erofs: avoid infinite loops due to corrupted subpage compact indexes

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that clusterofs can be larger than lclustersize for !NONHEAD lclusters in...

CVE-2025-68210

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted deliberately corrupted images...

UBUNTU-CVE-2025-68210

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted deliberately corrupted images...

CVE-2025-68210

CVE-2025-68210 : In the Linux kernel, the erofs decompression path could spin indefinitely when encountering incomplete zstd-compressed data, i.e., truncated payloads in crafted images. The issue arises from the decompression logic looping due to incomplete input, leading to potential denial-of-s...

CVE-2025-68210 erofs: avoid infinite loop due to incomplete zstd-compressed data

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted deliberately corrupted images...

CVE-2025-68210 erofs: avoid infinite loop due to incomplete zstd-compressed data

In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted deliberately corrupted images...

SUSE CVE-2025-40218

In the Linux kernel, the following vulnerability has been resolved: mm/damon/vaddr: do not repeat pteoffsetmaplock until success DAMON's virtual address space operation set implementation vaddr calls pteoffsetmaplock inside the page table walk callback function. This is for reading and writing pa...

PT-2025-51712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the kvaser usb leaf wait cmd and kvaser usb leaf read bulk callback functions related to handling zero-length commands used for aligning data to U...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a corrupt subpage compact index in erofs leading to an infinite loop...

Linux Distros Unpatched Vulnerability : CVE-2025-68308

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: kvaserusb: leaf: Fix potential infinite loop in command parsers The kvaserusbleafwaitcmd and kvaserusbleafreadbulkcallback functions contain logic to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from erofs mishandling of incomplete zstd compressed data, which could lead to an infinite loop...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from command parsing logic that may lead to an infinite loop...

PT-2025-51664

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue was identified in the Linux kernel related to the erofs filesystem, potentially leading to infinite loops when processing corrupted subpage compact indexes. This occurs when...

Linux Distros Unpatched Vulnerability : CVE-2025-68210

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - erofs: avoid infinite loop due to incomplete zstd-compressed data Currently, the decompression logic incorrectly spins if compressed data is truncated in crafte...