Answer in brief
CVE-2025-68342 records a Unknown severity vulnerability in can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=d08e973a77d128b25e01a08c34d89593fdf222da <8376208db9283fbdfaa06c8d80735ac9954fa64a || >=d08e973a77d128b25e01a08c34d89593fdf222da <4ffac725154cf6a253f5e6aa0c8946232b6a0af5 || >=d08e973a77d128b25e01a08c34d89593fdf222da <ad55004a3cb5b41ef78aa6c09e7bc5a489ba652b || >=d08e973a77d128b25e01a08c34d89593fdf222da <fb0c7c77a7ae3a2c3404b7d0173b8739a754b513 || >=d08e973a77d128b25e01a08c34d89593fdf222da <395d988f93861101ec89d0dd9e3b876ae9392a5b | 8376208db9283fbdfaa06c8d80735ac9954fa64a, 4ffac725154cf6a253f5e6aa0c8946232b6a0af5, ad55004a3cb5b41ef78aa6c09e7bc5a489ba652b, fb0c7c77a7ae3a2c3404b7d0173b8739a754b513, 395d988f93861101ec89d0dd9e3b876ae9392a5b |
| Linux/Linuxgeneric | 3.16 | Not reported |
Published upstream
Dec 23, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 28, 2026
In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): check actual_length before accessing data The URB received in gs_usb_receive_bulk_callback() contains a struct gs_host_frame. The length of the data after the header depends on the gs_host_frame hf::flags and the active device features (e.g. time stamping). Introduce a new function gs_usb_get_minimum_length() and check that we have at least received the required amount of data before accessing it. Only copy the data to that skb that has actually been received. [mkl: rename gs_usb_get_minimum_length() -> +gs_usb_get_minimum_rx_length()]
Quoted source text, attributed separately from HOL analysis.