CVE-2025-68759
CVE-2025-68759 is a security vulnerability that is still awaiting full analysis and scoring. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- EPSS exploit prediction: 0% (6th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2026-0889
- Published:
- Last modified:
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed on exit. Fix that by jumping to err_free_rings label on error, which calls rtl8180_free_rx_ring() to free the allocations. Remove the free of rx_ring in rtl8180_init_rx_ring() error path, and set the freed priv->rx_buf entry to null, to avoid double free.
Frequently asked questions
- What is CVE-2025-68759?
- In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: Fix potential memory leaks in rtl8180_init_rx_ring() In rtl8180_init_rx_ring(), memory is allocated for skb packets and DMA allocations in a loop. When an allocation fails, the previously successful allocations are not freed on exit. Fix that by jumping to err_free_rings label on error, which calls rtl8180_free_rx_ring() to free the allocations. Remove the free of rx_ring in rtl8180_init_rx_ring() error path, and set the freed priv->rx_buf entry to null, to avoid double free.
- Is CVE-2025-68759 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (6th percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2025-68759?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2025-68759 have an EU (EUVD) identifier?
- Yes. CVE-2025-68759 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-0889.
- When was CVE-2025-68759 published?
- CVE-2025-68759 was published on 2026-01-05 and last updated on 2026-06-17.
References
- https://git.kernel.org/stable/c/3677c01891fb0239361e444afee8398868e34bdf
- https://git.kernel.org/stable/c/89caaeee8dd95fae8bb4f4964e6fe3ca688500c4
- https://git.kernel.org/stable/c/9b5b9c042b30befc5b37e4539ace95af70843473
- https://git.kernel.org/stable/c/a4fb7cca9837378878e6c94d9e7af019c8fdfcdb
- https://git.kernel.org/stable/c/a813a74570212cb5f3a7d3b05c0cb0cd00bace1d
- https://git.kernel.org/stable/c/bf8513dfa31ea015c9cf415796dca2113d293840
- https://git.kernel.org/stable/c/c9d1c4152e6d32fa74034464854bee262a60bc43
- https://git.kernel.org/stable/c/ee7db11742b30641f21306105ad27a275e3c61d7