{"answers":{"affected":"","exploited":"There is no known exploitation of CVE-2025-68306 in the wild and no public exploit code.","fix":"Apply the vendor's patch.","what":"CVE-2025-68306 is a vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2025-68306 and fix it if it is affected.\n\nWhat it is: CVE-2025-68306 is a vulnerability in Linux, published on 16 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2025-68306 in the wild and no public exploit code.\n\nAffected product: Linux. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2025-68306/ (Markdown: https://insights.sbomify.com/CVE-2025-68306/index.md)","id":"CVE-2025-68306","markdown":"https://insights.sbomify.com/CVE-2025-68306/index.md","name":"CVE-2025-68306","record":{"aliases":["BELL-CVE-2025-68306","DEBIAN-CVE-2025-68306","GHSA-3qvp-cw88-xj3c","UBUNTU-CVE-2025-68306"],"analysis":{"component_type":"kernel","fix_type":"patch","impacts":["denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Linux kernel Bluetooth","requires_auth":"none","summary":"A missing null check in the Linux kernel Bluetooth driver causes a crash when releasing an interface, leading to denial of service.","user_interaction":"not_required","vuln_class":"null_dereference"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"Linux","cpe":[],"cvss":{"score":null,"severity":null,"source":null,"vector":null,"version":null},"cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface\n\nWhen performing reset tests and encountering abnormal card drop issues\nthat lead to a kernel crash, it is necessary to perform a null check\nbefore releasing resources to avoid attempting to release a null pointer.\n\n\u003c4\u003e[   29.158070] Hardware name: Google Quigon sku196612/196613 board (DT)\n\u003c4\u003e[   29.158076] Workqueue: hci0 hci_cmd_sync_work [bluetooth]\n\u003c4\u003e[   29.158154] pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n\u003c4\u003e[   29.158162] pc : klist_remove+0x90/0x158\n\u003c4\u003e[   29.158174] lr : klist_remove+0x88/0x158\n\u003c4\u003e[   29.158180] sp : ffffffc0846b3c00\n\u003c4\u003e[   29.158185] pmr_save: 000000e0\n\u003c4\u003e[   29.158188] x29: ffffffc0846b3c30 x28: ffffff80cd31f880 x27: ffffff80c1bdc058\n\u003c4\u003e[   29.158199] x26: dead000000000100 x25: ffffffdbdc624ea3 x24: ffffff80c1bdc4c0\n\u003c4\u003e[   29.158209] x23: ffffffdbdc62a3e6 x22: ffffff80c6c07000 x21: ffffffdbdc829290\n\u003c4\u003e[   29.158219] x20: 0000000000000000 x19: ffffff80cd3e0648 x18: 000000031ec97781\n\u003c4\u003e[   29.158229] x17: ffffff80c1bdc4a8 x16: ffffffdc10576548 x15: ffffff80c1180428\n\u003c4\u003e[   29.158238] x14: 0000000000000000 x13: 000000000000e380 x12: 0000000000000018\n\u003c4\u003e[   29.158248] x11: ffffff80c2a7fd10 x10: 0000000000000000 x9 : 0000000100000000\n\u003c4\u003e[   29.158257] x8 : 0000000000000000 x7 : 7f7f7f7f7f7f7f7f x6 : 2d7223ff6364626d\n\u003c4\u003e[   29.158266] x5 : 0000008000000000 x4 : 0000000000000020 x3 : 2e7325006465636e\n\u003c4\u003e[   29.158275] x2 : ffffffdc11afeff8 x1 : 0000000000000000 x0 : ffffffdc11be4d0c\n\u003c4\u003e[   29.158285] Call trace:\n\u003c4\u003e[   29.158290]  klist_remove+0x90/0x158\n\u003c4\u003e[   29.158298]  device_release_driver_internal+0x20c/0x268\n\u003c4\u003e[   29.158308]  device_release_driver+0x1c/0x30\n\u003c4\u003e[   29.158316]  usb_driver_release_interface+0x70/0x88\n\u003c4\u003e[   29.158325]  btusb_mtk_release_iso_intf+0x68/0xd8 [btusb (HASH:e8b6 5)]\n\u003c4\u003e[   29.158347]  btusb_mtk_reset+0x5c/0x480 [btusb (HASH:e8b6 5)]\n\u003c4\u003e[   29.158361]  hci_cmd_sync_work+0x10c/0x188 [bluetooth (HASH:a4fa 6)]\n\u003c4\u003e[   29.158430]  process_scheduled_works+0x258/0x4e8\n\u003c4\u003e[   29.158441]  worker_thread+0x300/0x428\n\u003c4\u003e[   29.158448]  kthread+0x108/0x1d0\n\u003c4\u003e[   29.158455]  ret_from_fork+0x10/0x20\n\u003c0\u003e[   29.158467] Code: 91343000 940139d1 f9400268 927ff914 (f9401297)\n\u003c4\u003e[   29.158474] ---[ end trace 0000000000000000 ]---\n\u003c0\u003e[   29.167129] Kernel panic - not syncing: Oops: Fatal exception\n\u003c2\u003e[   29.167144] SMP: stopping secondary CPUs\n\u003c4\u003e[   29.167158] ------------[ cut here ]------------","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":true,"headline":"Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface","id":"CVE-2025-68306","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":null,"products":[],"type":"null_dereference","year":"2025"},"n_packages":0,"n_references":3,"next":{"headline":"can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs","id":"CVE-2025-68307"},"packages":[],"prev":{"headline":"Bluetooth: hci_sock: Prevent race in socket write iter and sock bind","id":"CVE-2025-68305"},"products":["Linux"],"published":"2025-12-16","related":[],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"}],"ssvc":{"automatable":null,"exploitation":null,"technical_impact":null},"state":"PUBLISHED","updated":"2026-05-11","vendors":["Linux"]},"summary":"A missing null check in the Linux kernel Bluetooth driver causes a crash when releasing an interface, leading to denial of service.","url":"https://insights.sbomify.com/CVE-2025-68306/"}