Integer Overflow in Linux Kernel's MTD Character Driver Exposes Systems

CVE-2025-68237

What is CVE-2025-68237?

A vulnerability in the Linux Kernel's MTD character driver allows for potential integer overflow due to improper handling of user-provided 'req.start' and 'req.len' values. Although 'req.len' is capped at U32_MAX, the 'req.start' variable can reach up to U64_MAX, presenting a risk of overflow when combined. This flaw can potentially lead to unexpected behaviors or system exploits. The vulnerability has been addressed using the function check_add_overflow() to prevent such occurrences.

References