PT-2025-52896 · Linux+4 · Linux Kernel+4

Published 2025-12-24 · Updated 2026-04-20 · CVE-2025-68360

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.50

Description The MT7996 driver in the Linux kernel may use an incorrect wed (Wireless Ethernet Driver) reference when handling traffic offload, potentially leading to a kernel crash. This issue occurs when the hardware operates using wed hif2, such as on 6GHz links. The crash is triggered during wed callback operations due to the driver assuming the primary wed device is always used.

Recommendations Update to Linux kernel version 6.12.50 or later.

Exploit

Related Identifiers

CVE-2025-68360

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Debian

Linuxmint

Linux Kernel

Mt7996 Driver

Ubuntu

References · 836

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68360.json · Exploit
• https://ubuntu.com/security/CVE-2025-40264 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68758 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68741 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68327 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23405 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68739 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68336 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40345 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68338 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68379 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68332 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20555-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68374 · Vendor Advisory