Review reviewHigh

CVE-2025-68360

Linux

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks MT7996 driver can use both wed and wed_hif2 devices to offload traffic from/to the wireless NIC. In the current codebase we assume to always use the primary wed device in wed callbacks resulting in the following crash if the hw runs wed_hif2 (e.g. 6GHz link). [ 297.455876] Unable to handle kernel read from unreadable memory at virtual address 000000000000080a [ 297.464928] Mem abort info: [ 297.467722] ESR = 0x0000000096000005 [ 297.471461] EC = 0x25: D...

CVSS: 8.2
EPSS: 0.41%
CISA KEV: Not listed
Published: 2025.12.24

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.41%

Technical severityCVSS 8.2

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 83eafc9251d6d30574b629ac637c56d168fcbdd9 < ab94ecb997fd1bbc501a0116c7aad51556b67c86, >= 83eafc9251d6d30574b629ac637c56d168fcbdd9 < d582d0e988d696698c94edf097062bb987ae592c, >= 83eafc9251d6d30574b629ac637c56d168fcbdd9 < 385aab8fccd7a8746b9f1a17f3c1e38498a14bc7, >= 6.8
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE: Not available