01 Record

CVE-2025-68360

wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks

HighPUBLISHEDCNA: Linux

CNA base score8.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

View raw JSON

02 Description

wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.53% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 44.8% of scored records. A rank, not a probability.

NVD base score

8.2 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-21.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-12-24 10:32Z10 MO AGO
Last updated: 2026-10-21 12:38Z8 DAYS AGO
Reserved: 2025-12-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 8.2)
CNA CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: fe7bf3048c7720b16e871173780f8b8d137eb161438efdae6084167b2dfa3461

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux83eafc9251d6d30574b629ac637c56d168fcbdd9 to < 369cdd236970f7ad95e47eb2d43dbc759288a636, 83eafc9251d6d30574b629ac637c56d168fcbdd9 to < ab94ecb997fd1bbc501a0116c7aad51556b67c86, 83eafc9251d6d30574b629ac637c56d168fcbdd9 to < d582d0e988d696698c94edf097062bb987ae592c, 83eafc9251d6d30574b629ac637c56d168fcbdd9 to < 385aab8fccd7a8746b9f1a17f3c1e38498a14bc7, 6.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/369cdd236970f7ad95e47eb2d43dbc759288a636
git.kernel.orghttps://git.kernel.org/stable/c/ab94ecb997fd1bbc501a0116c7aad51556b67c86
git.kernel.orghttps://git.kernel.org/stable/c/d582d0e988d696698c94edf097062bb987ae592c
git.kernel.orghttps://git.kernel.org/stable/c/385aab8fccd7a8746b9f1a17f3c1e38498a14bc7

07 Fixed in

Debian 13

linux
No fix yet

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.13-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.