CVE-2025-68765
In the Linux kernel, the following vulnerability has been resolved: mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the subsequent call to mt76_connac_mcu_alloc_wtbl_req() fails, the function returns an error without freeing sskb, leading to a memory leak. Fix this by calling dev_kfree_skb() on sskb in the error handling path to ensure it is properly released.
Affected versions
Linux kernel versions
5.7
and later are affected. Fixed in
5.15.198,
6.1.160,
6.6.120,
6.12.63,
6.17.13,
6.18.2,
6.19
and their respective stable series.
References
The following references provide additional information about CVE-2025-68765 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/1c3c234af9407256ed670c8752923a672eea4225
-
PatchKernel patch commithttps://git.kernel.org/stable/c/278bfed4529a0c9c9119f5a52ddafe69db61a75c
-
PatchKernel patch commithttps://git.kernel.org/stable/c/4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49
Frequently asked questions
-
What is CVE-2025-68765?
CVE-2025-68765 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 5.7 onward and has been patched in 5.15.198, 6.1.160, 6.6.120 and others. CVE-2025-68765 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2025-68765?
Yes — CVE-2025-68765 has been patched. Fixed versions include 5.15.198, 6.1.160, 6.6.120 and others. If you are running Linux kernel 5.7 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2025-68765 actively exploited?
No — CVE-2025-68765 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.