CVE-2025-68217: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: Input: pegasus-notetaker - fix potential out-of-bounds access In the pegasus_notetaker driver, the pegasus_probe() function allocates the URB transfer buffer using the wMaxPacketSize value from the endpoint descriptor. An attacker can use a malicious USB descriptor to force the allocation of a very small buffer. Subsequently, if the device sends an interrupt packet with a specific pattern (e.g., where the first byte is 0x80 or 0x42), the pegasus_parse_packet() function parses the packet without checking the allocated buffer size. This leads to an out-of-bounds memory access.

Affected products

• Linux Linux: from 4.8, before 5.4.302 (fixed in 5.4.302); from 5.5, before 5.10.247 (fixed in 5.10.247); from 5.11, before 5.15.197 (fixed in 5.15.197); from 5.16, before 6.1.159 (fixed in 6.1.159); from 6.2, before 6.6.118 (fixed in 6.6.118); from 6.7, before 6.12.60 (fixed in 6.12.60); …

Published 2025-12-16. Last modified 2026-06-17.