CVE-2025-68328 firmware: stratix10-svc: fix bug in saving controller data
A bug in the Stratix10 service driver causes a kernel panic during module removal, leading to denial of service for local privileged users.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-68328?
CVE-2025-68328 is a vulnerability in Linux, published on 22 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
firmware: stratix10-svc: fix bug in saving controller data
Fix the incorrect usage of platform_set_drvdata and dev_set_drvdata. They both are of the same data and overrides each other. This resulted in the rmmod of the svc driver to fail and throw a kernel panic for kthread_stop and fifo free.
Which versions are affected by CVE-2025-68328?
How do I fix CVE-2025-68328?
Apply the vendor's patch.
Is CVE-2025-68328 being exploited?
There is no known exploitation of CVE-2025-68328 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2025-68328, DEBIAN-CVE-2025-68328, GHSA-p94w-2mf4-q2mj, ROOT-OS-DEBIAN-12-CVE-2025-68328, ROOT-OS-DEBIAN-13-CVE-2025-68328, ROOT-OS-UBUNTU-2204-CVE-2025-68328 and 2 more.