Task Timeout Vulnerability in Linux Kernel MultiQ3 Driver
CVE-2025-68258

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 16 December 2025

What is CVE-2025-68258?

In the Linux kernel, a vulnerability exists within the multiq3 driver, particularly in the multiq3_attach() function where improper handling of configuration options can lead to task timeouts. This issue occurs when maliciously crafted configurations, specifically relating to the number of channels for encoder subdevices, are processed. If excessive channels are designated, multiple calls to the multiq3_encoder_reset() function may cause tasks to block, resulting in significant delays and potential operational interruptions for affected devices. This vulnerability underlines the importance of sanitizing input configurations by imposing sensible limits, such as restricting the maximum number of encoder chips to four (with two channels each), thereby mitigating the risk of these timeout scenarios.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch