PT-2025-52754 · Microchip Technology+4 · Microchip Network Devices+4

Published

2025-12-23

·

Updated

2026-04-20

·

CVE-2025-68338

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel related to DSA (Distributed Switch Architecture) and Microchip network devices. Specifically, the ksz irq free() function may be called on an uninitialized ksz irq structure during setup failures, such as those occurring within ksz ptp irq setup(). This can lead to the freeing of uninitialized IRQ numbers and/or domains. The issue is addressed by utilizing dsa switch for each user port continue reverse() in the error path to iterate only over fully initialized ports.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

AZL-72983
CVE-2025-68338
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8152-1

Affected Products

Debian
Linuxmint
Linux Kernel
Microchip Network Devices
Ubuntu