01 Record

CVE-2025-68801

mlxsw: spectrum_router: Fix neighbour use-after-free

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

mlxsw: spectrum_router: Fix neighbour use-after-free

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.15% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 4.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-19.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-01-13 15:29Z9 MO AGO

Last updated

2026-10-19 18:05Z10 DAYS AGO

Reserved

2025-12-24

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

497239352448963c5075acd2dfc75a0f8f45d1ef6e7a3e30b4cbec43c7eeb8a3

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux6cf3c971dc84cb36579515ddb488919b9e9fb6de to < a2dfe6758fc63e542105bee8b17a3a7485684db0, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to < 9e0a0d9eeb0dbeba2c83fa837885b19b8b9230fc, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to < c437fbfd4382412598cdda1f8e2881b523668cc2, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to < 4a3c569005f42ab5e5b2ad637132a33bf102cc08, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to < ed8141b206bdcfd5d0b92c90832eeb77b7a60a0a, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to < 675c5aeadf6472672c472dc0f26401e4fcfbf254, 6cf3c971dc84cb36579515ddb488919b9e9fb6de to < 8b0e69763ef948fb872a7767df4be665d18f5fd4, 4.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a2dfe6758fc63e542105bee8b17a3a7485684db0
git.kernel.orghttps://git.kernel.org/stable/c/9e0a0d9eeb0dbeba2c83fa837885b19b8b9230fc
git.kernel.orghttps://git.kernel.org/stable/c/c437fbfd4382412598cdda1f8e2881b523668cc2
git.kernel.orghttps://git.kernel.org/stable/c/4a3c569005f42ab5e5b2ad637132a33bf102cc08
git.kernel.orghttps://git.kernel.org/stable/c/ed8141b206bdcfd5d0b92c90832eeb77b7a60a0a
git.kernel.orghttps://git.kernel.org/stable/c/675c5aeadf6472672c472dc0f26401e4fcfbf254
git.kernel.orghttps://git.kernel.org/stable/c/8b0e69763ef948fb872a7767df4be665d18f5fd4

07 Fixed in

Debian 12

linux
Fixed in 6.1.162-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.69-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.18.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.