PT-2026-1057 · Gpsd+4 · Gpsd+4

Published 2025-01-01 · Updated 2026-01-30 · CVE-2025-67268

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions gpsd versions prior to commit dc966aa

Description The software contains a heap-based out-of-bounds write issue in the drivers/driver nmea2000.c file. The hnd 129540 function, responsible for processing NMEA2000 PGN 129540 packets (GNSS Satellites in View), does not properly validate the user-supplied satellite count against the size of the skyview array (184 elements). An attacker can exploit this by providing a satellite count of up to 255, resulting in a write beyond the array boundaries, leading to memory corruption and potential Denial of Service (DoS), and potentially arbitrary code execution.

Recommendations Update gpsd to commit dc966aa or a later version.

Exploit

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

ALSA-2026:0770

ALSA-2026:0771

BDU:2026-06690

CVE-2025-67268

MGASA-2026-0028

OPENSUSE-SU-2026:10008-1

RHSA-2026:0770

RHSA-2026:0771

RHSA-2026:1621

USN-7948-1

Affected Products

Debian

Linuxmint

Rocky Linux

Ubuntu

Gpsd

References · 42

• 🔥 https://github.com/Jaenact/gspd_cve/blob/main/CVE-2025-67268/README.md · Exploit
• https://github.com/ntpsec/gpsd/commit/dc966aa74c075d0a6535811d98628625cbfbe3f4 · Patch
• https://errata.almalinux.org/10/ALSA-2026-0770.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-67268 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7948-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:0771 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-0771.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:0770 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2026-0518SE47 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-0771.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10008-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-67268 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-67268 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-67268 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0028 · Vendor Advisory