What is CVE-2025-68281?

CVE-2025-68281 is a unscored severity Linux kernel vulnerability, affecting Linux kernel versions from 6.17 onward and patched in 6.17.12 and 6.18. CVE-2025-68281 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2025-68281?

CVE-2025-68281 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2025-68281?

Yes, CVE-2025-68281 has been patched. Fixed versions include 6.17.12 and 6.18. If you are running Linux kernel 6.17 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2025-68281 actively exploited?

CVE-2025-68281 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2025-68281

In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA: bug fix while parsing mipi-sdca-control-cn-list "struct sdca_control" declares "values" field as integer array. But the memory allocated to it is of char array. This causes crash for sdca_parse_function API. This patch addresses the issue by allocating correct data size.

Package Linux Kernel

Published 2025-12-16

Last modified 2026-04-15

Patch available

Yes

Affected versions

Linux kernel versions 6.17 and later are affected. Fixed in 6.17.12, 6.18 and their respective stable series.

Affected from

≥ 6.17

Fixed in

✓ 6.17.12 6.17.x ✓ 6.18

References

The following references provide additional information about CVE-2025-68281 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.

Kernel patch commit
https://git.kernel.org/stable/c/eb2d6774cc0d9d6ab8f924825695a85c14b2e0c2
Patch
Kernel patch commit
https://git.kernel.org/stable/c/fcd5786b506c51cbabc2560c68e040d8dba22a0d
Patch

Frequently asked questions

What is CVE-2025-68281?

CVE-2025-68281 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.17 onward and has been patched in 6.17.12 and 6.18. CVE-2025-68281 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2025-68281?

Yes — CVE-2025-68281 has been patched. Fixed versions include 6.17.12 and 6.18. If you are running Linux kernel 6.17 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2025-68281 actively exploited?

No — CVE-2025-68281 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.