Memory Corruption in Linux Kernel Affecting Intel Punit IPC Device

CVE-2025-68303

What is CVE-2025-68303?

A memory corruption vulnerability has been identified in the Linux kernel's handling of Intel's Punit IPC device. The flaw arises from an incorrect pointer usage where the address of the pointer '&punit_ipcdev' was passed instead of the pointer 'punit_ipcdev' itself. This error results in a write operation to an incorrect memory address when invoking 'complete(&ipcdev->cmd_complete);', leading to potential memory corruption. It is essential for users and system administrators to be aware of this issue and apply necessary patches to mitigate the risks associated with this vulnerability.

References