CVE-2025-68724

Linux Kernel - Buffer Overflow in Asymmetric Key ID Generation

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use check_add_overflow() to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetric_key_id structure and return ERR_PTR(-EOVERFLOW) accordingly. This prevents a possible buffer overflow when copying data from potentially malicious X.509 certificate fields that can be arbitrarily large, such as ASN.1 INTEGER serial numbers, issuer names, etc.

Scores

EPSS 0.0003
EPSS Percentile 9.3%

Details

Status published
Products (25)
linux/Kernel 3.18.0 - 5.10.248linux
linux/Kernel 5.11.0 - 5.15.198linux
linux/Kernel 5.16.0 - 6.1.160linux
linux/Kernel 6.13.0 - 6.17.13linux
linux/Kernel 6.18.0 - 6.18.2linux
linux/Kernel 6.2.0 - 6.6.120linux
linux/Kernel 6.7.0 - 6.12.63linux
Linux/Linux < 3.18
Linux/Linux 3.18
Linux/Linux 5.10.248 - 5.10.*
... and 15 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026