CVE-2025-68284

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.57% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 45.1% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-07-30.

Red Hat severity

Important. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2025-12-16 15:06Z8 MO AGO

Last updated

2026-08-05 12:10Z1 MO AGO

Reserved

2025-12-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-787Out-of-bounds WriteBase

Data version

5.2

Document digest

aab2f17aadef03d096782063b7c670b6eb842ec4435468885bea6733d2974de8

• git.kernel.orghttps://git.kernel.org/stable/c/f22c55a20a2d9ffbbac57408d5d488cef8201e9d
• git.kernel.orghttps://git.kernel.org/stable/c/8dfcc56af28cffb8f25fb9be37b3acc61f2a3d09
• git.kernel.orghttps://git.kernel.org/stable/c/ccbccfba25e9aa395daaea156b5e7790910054c4
• git.kernel.orghttps://git.kernel.org/stable/c/5ef575834ca99f719d7573cdece9df2fe2b72424
• git.kernel.orghttps://git.kernel.org/stable/c/6920ff09bf911bc919cd7a6b7176fbdd1a6e6850
• git.kernel.orghttps://git.kernel.org/stable/c/7fce830ecd0a0256590ee37eb65a39cbad3d64fc