PT-2025-52917 · Linux+4 · Linux Kernel+4
Published
2025-10-23
·
Updated
2026-06-16
·
CVE-2025-68724
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An integer overflow issue exists in the Linux kernel's asymmetric key handling. Specifically, a potential overflow can occur when adding binary blob lengths and the size of an asymmetric key id structure. This could lead to a buffer overflow when processing data from potentially malicious X.509 certificate fields, such as ASN.1 INTEGER serial numbers or issuer names. The
check add overflow() function is used to prevent this overflow by returning an error if an overflow is detected.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Rocky Linux
Ubuntu