CVE-2025-68303

platform/x86: intel: punit_ipc: fix memory corruption

State: Published
Severity: 7.8 High
Published: Dec 16, 2025
Updated: Aug 5, 2026
Reserved: Dec 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: intel: punit_ipc: fix memory corruption

This passes the address of the pointer "&punit_ipcdev" when the intent was to pass the pointer itself "punit_ipcdev" (without the ampersand). This means that the:

complete(&ipcdev->cmd_complete);

in intel_punit_ioc() will write to a wrong memory address corrupting it.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	fdca4f16f57da76a8e68047923588a87d1c01f0a to before 15d560cdf5b36c51fffec07ac2a983ab3bff4cb2Affected fdca4f16f57da76a8e68047923588a87d1c01f0a to before 46e9d6f54184573dae1dcbcf6685a572ba6f4480Affected fdca4f16f57da76a8e68047923588a87d1c01f0a to before 3e7442c5802146fd418ba3f68dcb9ca92b5cec83Affected fdca4f16f57da76a8e68047923588a87d1c01f0a to before a21615a4ac6fecbb586d59fe2206b63501021789Affected fdca4f16f57da76a8e68047923588a87d1c01f0a to before c2ee6d38996775a19bfdf20cb01a9b8698cb0baaAffected fdca4f16f57da76a8e68047923588a87d1c01f0a to before 9b9c0adbc3f8a524d291baccc9d0c04097fb4869Affected
LinuxLinux	4.5Affected before 4.5Not affected 5.15.197 through 5.15.Not affected 6.1.159 through 6.1.Not affected 6.6.119 through 6.6.Not affected 6.12.61 through 6.12.Not affected 6.17.11 through 6.17.*Not affected 6.18 and laterNot affected

Product

Versions

LinuxLinux

fdca4f16f57da76a8e68047923588a87d1c01f0a to before 15d560cdf5b36c51fffec07ac2a983ab3bff4cb2Affected
fdca4f16f57da76a8e68047923588a87d1c01f0a to before 46e9d6f54184573dae1dcbcf6685a572ba6f4480Affected
fdca4f16f57da76a8e68047923588a87d1c01f0a to before 3e7442c5802146fd418ba3f68dcb9ca92b5cec83Affected
fdca4f16f57da76a8e68047923588a87d1c01f0a to before a21615a4ac6fecbb586d59fe2206b63501021789Affected
fdca4f16f57da76a8e68047923588a87d1c01f0a to before c2ee6d38996775a19bfdf20cb01a9b8698cb0baaAffected
fdca4f16f57da76a8e68047923588a87d1c01f0a to before 9b9c0adbc3f8a524d291baccc9d0c04097fb4869Affected

LinuxLinux

4.5Affected
before 4.5Not affected
5.15.197 through 5.15.*Not affected
6.1.159 through 6.1.*Not affected
6.6.119 through 6.6.*Not affected
6.12.61 through 6.12.*Not affected
6.17.11 through 6.17.*Not affected
6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.