Security Advisory

CVE-2025-68303

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-12-16 15:06:21
Last updated 2026-07-30 06:03:54
Assigner Linux
CVSS score not scored
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: intel: punit_ipc: fix memory corruption This passes the address of the pointer "&punit_ipcdev" when the intent was to pass the pointer itself "punit_ipcdev" (without the ampersand). This means that the: complete(&ipcdev->cmd_complete); in intel_punit_ioc() will write to a wrong memory address corrupting it.