https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 09:33:35 +0000 https://vulnerability.circl.lu/vuln/cve-2025-68362 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()</p> <p>The rtl8187_rx_cb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not validate if the received packet (skb-&gt;len from urb-&gt;actual_length) is large enough to contain this header.</p> <p>If a truncated packet is received, this will lead to a buffer underflow, reading memory before the start of the skb data area, and causing a kernel panic.</p> <p>Add length checks for both rtl8187 and rtl8187b descriptor headers before attempting to access them, dropping the packet cleanly if the check fails.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()</p> <p>The rtl8187_rx_cb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not validate if the received packet (skb-&gt;len from urb-&gt;actual_length) is large enough to contain this header.</p> <p>If a truncated packet is received, this will lead to a buffer underflow, reading memory before the start of the skb data area, and causing a kernel panic.</p> <p>Add length checks for both rtl8187 and rtl8187b descriptor headers before attempting to access them, dropping the packet cleanly if the check fails.</p> https://vulnerability.circl.lu/vuln/cve-2025-68362