PT-2025-53004 · Linux+4 · Linux Kernel+4

Published 2025-12-24 · Updated 2026-04-06 · CVE-2025-68738

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the mt76 and mt7996 components. Specifically, a null pointer dereference can occur in the mt7996 conf tx() function when a link does not have an assigned channel, as mt7996 vif link may return NULL. The issue is addressed by relocating queue parameters within the struct mt7996 vif link.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-68738

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

Mt76

Mt7996

References · 413

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68738.json · Exploit
• https://ubuntu.com/security/CVE-2025-68227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71128 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8152-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40260 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23060 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68742 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68283 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68220 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68362 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40255 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68738 · Vendor Advisory