Get real-time updates on Telegram
CVE-2025-68800: Linux 5.7
CVE-2025-68800. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.0015 (percentile 0.03807), scored 19-Oct-2026.
Affected technology
Linux · f38656d067257cc43b652958dd154e1ab0773701 to before b957366f5611bbaba03dd10ef861283347ddcc88, f38656d067257cc43b652958dd154e1ab0773701 to before 6e367c361a523a4b54fe618215c64a0ee189caf0, f38656d067257cc43b652958dd154e1ab0773701 to before 37ca08b35a27ce8fd8e74dd3fd2ae21c23b63b73, f38656d067257cc43b652958dd154e1ab0773701 to before 5f2831fc593c2b2efbff7dd0dd7441cec76adcd5, f38656d067257cc43b652958dd154e1ab0773701 to before 216afc198484fde110ebeafc017992266f4596ce, f38656d067257cc43b652958dd154e1ab0773701 to before 4049a6ace209f4ed150429f86ae796d7d6a4c22b, f38656d067257cc43b652958dd154e1ab0773701 to before 8ac1dacec458f55f871f7153242ed6ab60373b90
Linux
Linux · 5.7
Linux
Component: Not specified by the source
File: drivers/net/ethernet/mellanox/mlxsw/spectrum_mr.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
A local attacker with low privileges can trigger a use-after-free error. Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not state a further attacker outcome.
- CWE
- CWE-416
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0015 · percentile 0.03807 · 2026-10-19
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 19:46:42.191502+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-68800.html