PT-2025-51641 · Linux+2 · Linux Kernel+2

Published 2025-12-16 · Updated 2026-04-06 · CVE-2025-68228

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The create in format blob() function in the Linux kernel’s DRM/plane subsystem could return a NULL pointer instead of a valid pointer or an error value. This could lead to a system crash (oops) if the caller attempts to dereference the NULL pointer. The issue is resolved by ensuring the function returns proper error values in failure cases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68228

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 210

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68228.json · Exploit
• https://ubuntu.com/security/CVE-2025-68227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8152-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23060 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68742 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68283 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68220 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68362 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-68228 · Security Note
• https://ubuntu.com/security/CVE-2025-40255 · Vendor Advisory