GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2025-68773 (GCVE-0-2025-68773)

Vulnerability from cvelistv5 – Published: 2026-01-13 15:28 – Updated: 2026-09-08 08:43
VLAI
Title
spi: fsl-cpm: Check length parity before switching to 16 bit mode
Summary
In the Linux kernel, the following vulnerability has been resolved: spi: fsl-cpm: Check length parity before switching to 16 bit mode Commit fc96ec826bce ("spi: fsl-cpm: Use 16 bit mode for large transfers with even size") failed to make sure that the size is really even before switching to 16 bit mode. Until recently the problem went unnoticed because kernfs uses a pre-allocated bounce buffer of size PAGE_SIZE for reading EEPROM. But commit 8ad6249c51d0 ("eeprom: at25: convert to spi-mem API") introduced an additional dynamically allocated bounce buffer whose size is exactly the size of the transfer, leading to a buffer overrun in the fsl-cpm driver when that size is odd. Add the missing length parity verification and remain in 8 bit mode when the length is not even.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 60afe299bb541a928ba39bcb4ae8d3e428d1c5a5 , < c8f1d35076b78df61ace737e41cc1f4b7b63236c (git)
Affected: 4badd33929c05ed314794b95f1af1308f7222be8 , < 9c34a4a2ead00979d203a8c16bea87f0ef5291d8 (git)
Affected: 7f6738e003b364783f3019fdf6e7645bc8dd1643 , < 837a23a11e0f734f096c7c7b0778d0e625e3dc87 (git)
Affected: fc96ec826bced75cc6b9c07a4ac44bbf651337ab , < 3dd6d01384823e1bd8602873153d6fc4337ac4fe (git)
Affected: fc96ec826bced75cc6b9c07a4ac44bbf651337ab , < 743cebcbd1b2609ec5057ab474979cef73d1b681 (git)
Affected: fc96ec826bced75cc6b9c07a4ac44bbf651337ab , < be0b613198e6bfa104ad520397cab82ad3ec1771 (git)
Affected: fc96ec826bced75cc6b9c07a4ac44bbf651337ab , < 1417927df8049a0194933861e9b098669a95c762 (git)
Affected: 42c04316d9275ec267d36e5e9064cd56c9884148 (git)
Affected: dc120f2d35b030390a2bc0f94dd5f37e900cae91 (git)
Affected: b558275c1b040f0e5aa56c862241f9212b6118c3 (git)
Affected: b9d9e8856f1c83e4277403f9b4c369b322ebcb12 (git)
Affected: 36a6d0f66c874666caf4e8be155b1be30f6231be (git)
Affected: 5.10.181 , < 5.10.248 (semver)
Affected: 5.15.114 , < 5.15.198 (semver)
Affected: 6.1.29 , < 6.1.160 (semver)
Affected: 4.14.316 , < 4.15 (semver)
Affected: 4.19.284 , < 4.20 (semver)
Affected: 5.4.244 , < 5.5 (semver)
Affected: 6.2.16 , < 6.3 (semver)
Affected: 6.3.3 , < 6.4 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.4
Unaffected: 0 , < 6.4 (semver)
Unaffected: 5.10.248 , ≤ 5.10.* (semver)
Unaffected: 5.15.198 , ≤ 5.15.* (semver)
Unaffected: 6.1.160 , ≤ 6.1.* (semver)
Unaffected: 6.6.120 , ≤ 6.6.* (semver)
Unaffected: 6.12.64 , ≤ 6.12.* (semver)
Unaffected: 6.18.3 , ≤ 6.18.* (semver)
Unaffected: 6.19 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP Affected: V3.1.6 , < * (custom)
guessed Create a notification for this product.
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP Affected: V3.1.6 , < * (custom)
guessed Create a notification for this product.
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP Affected: V3.1.6 , < * (custom)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS S7-1500 CPU 1518-4 PN/DP MFP",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "V3.1.6",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T08:43:24.390Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/spi/spi-fsl-spi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "c8f1d35076b78df61ace737e41cc1f4b7b63236c",
              "status": "affected",
              "version": "60afe299bb541a928ba39bcb4ae8d3e428d1c5a5",
              "versionType": "git"
            },
            {
              "lessThan": "9c34a4a2ead00979d203a8c16bea87f0ef5291d8",
              "status": "affected",
              "version": "4badd33929c05ed314794b95f1af1308f7222be8",
              "versionType": "git"
            },
            {
              "lessThan": "837a23a11e0f734f096c7c7b0778d0e625e3dc87",
              "status": "affected",
              "version": "7f6738e003b364783f3019fdf6e7645bc8dd1643",
              "versionType": "git"
            },
            {
              "lessThan": "3dd6d01384823e1bd8602873153d6fc4337ac4fe",
              "status": "affected",
              "version": "fc96ec826bced75cc6b9c07a4ac44bbf651337ab",
              "versionType": "git"
            },
            {
              "lessThan": "743cebcbd1b2609ec5057ab474979cef73d1b681",
              "status": "affected",
              "version": "fc96ec826bced75cc6b9c07a4ac44bbf651337ab",
              "versionType": "git"
            },
            {
              "lessThan": "be0b613198e6bfa104ad520397cab82ad3ec1771",
              "status": "affected",
              "version": "fc96ec826bced75cc6b9c07a4ac44bbf651337ab",
              "versionType": "git"
            },
            {
              "lessThan": "1417927df8049a0194933861e9b098669a95c762",
              "status": "affected",
              "version": "fc96ec826bced75cc6b9c07a4ac44bbf651337ab",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "42c04316d9275ec267d36e5e9064cd56c9884148",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "dc120f2d35b030390a2bc0f94dd5f37e900cae91",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b558275c1b040f0e5aa56c862241f9212b6118c3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "b9d9e8856f1c83e4277403f9b4c369b322ebcb12",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "36a6d0f66c874666caf4e8be155b1be30f6231be",
              "versionType": "git"
            },
            {
              "lessThan": "5.10.248",
              "status": "affected",
              "version": "5.10.181",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.198",
              "status": "affected",
              "version": "5.15.114",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.160",
              "status": "affected",
              "version": "6.1.29",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.316",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.284",
              "versionType": "semver"
            },
            {
              "lessThan": "5.5",
              "status": "affected",
              "version": "5.4.244",
              "versionType": "semver"
            },
            {
              "lessThan": "6.3",
              "status": "affected",
              "version": "6.2.16",
              "versionType": "semver"
            },
            {
              "lessThan": "6.4",
              "status": "affected",
              "version": "6.3.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/spi/spi-fsl-spi.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.4"
            },
            {
              "lessThan": "6.4",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.248",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.198",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.160",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.120",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.64",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.19",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.248",
                  "versionStartIncluding": "5.10.181",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.198",
                  "versionStartIncluding": "5.15.114",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.160",
                  "versionStartIncluding": "6.1.29",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.120",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.64",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.3",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.19",
                  "versionStartIncluding": "6.4",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.316",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.284",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "5.4.244",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.2.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.3.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: fsl-cpm: Check length parity before switching to 16 bit mode\n\nCommit fc96ec826bce (\"spi: fsl-cpm: Use 16 bit mode for large transfers\nwith even size\") failed to make sure that the size is really even\nbefore switching to 16 bit mode. Until recently the problem went\nunnoticed because kernfs uses a pre-allocated bounce buffer of size\nPAGE_SIZE for reading EEPROM.\n\nBut commit 8ad6249c51d0 (\"eeprom: at25: convert to spi-mem API\")\nintroduced an additional dynamically allocated bounce buffer whose size\nis exactly the size of the transfer, leading to a buffer overrun in\nthe fsl-cpm driver when that size is odd.\n\nAdd the missing length parity verification and remain in 8 bit mode\nwhen the length is not even."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T16:02:52.102Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/c8f1d35076b78df61ace737e41cc1f4b7b63236c"
        },
        {
          "url": "https://git.kernel.org/stable/c/9c34a4a2ead00979d203a8c16bea87f0ef5291d8"
        },
        {
          "url": "https://git.kernel.org/stable/c/837a23a11e0f734f096c7c7b0778d0e625e3dc87"
        },
        {
          "url": "https://git.kernel.org/stable/c/3dd6d01384823e1bd8602873153d6fc4337ac4fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/743cebcbd1b2609ec5057ab474979cef73d1b681"
        },
        {
          "url": "https://git.kernel.org/stable/c/be0b613198e6bfa104ad520397cab82ad3ec1771"
        },
        {
          "url": "https://git.kernel.org/stable/c/1417927df8049a0194933861e9b098669a95c762"
        }
      ],
      "title": "spi: fsl-cpm: Check length parity before switching to 16 bit mode",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2025-68773",
    "datePublished": "2026-01-13T15:28:50.686Z",
    "dateReserved": "2025-12-24T10:30:51.035Z",
    "dateUpdated": "2026-09-08T08:43:24.390Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-68773",
      "date": "2026-09-10",
      "epss": "0.00207",
      "percentile": "0.10847"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-68773\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-01-13T16:15:56.840\",\"lastModified\":\"2026-07-14T13:17:59.697\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nspi: fsl-cpm: Check length parity before switching to 16 bit mode\\n\\nCommit fc96ec826bce (\\\"spi: fsl-cpm: Use 16 bit mode for large transfers\\nwith even size\\\") failed to make sure that the size is really even\\nbefore switching to 16 bit mode. Until recently the problem went\\nunnoticed because kernfs uses a pre-allocated bounce buffer of size\\nPAGE_SIZE for reading EEPROM.\\n\\nBut commit 8ad6249c51d0 (\\\"eeprom: at25: convert to spi-mem API\\\")\\nintroduced an additional dynamically allocated bounce buffer whose size\\nis exactly the size of the transfer, leading to a buffer overrun in\\nthe fsl-cpm driver when that size is odd.\\n\\nAdd the missing length parity verification and remain in 8 bit mode\\nwhen the length is not even.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\\n\\nspi: fsl-cpm: Verificar la paridad de la longitud antes de cambiar al modo de 16 bits\\n\\nEl commit fc96ec826bce (\u0027spi: fsl-cpm: Usar el modo de 16 bits para transferencias grandes con tama\u00f1o par\u0027) no logr\u00f3 asegurar que el tama\u00f1o fuera realmente par antes de cambiar al modo de 16 bits. Hasta hace poco el problema pas\u00f3 desapercibido porque kernfs utiliza un b\u00fafer de rebote preasignado de tama\u00f1o PAGE_SIZE para leer la EEPROM.\\n\\nPero el commit 8ad6249c51d0 (\u0027eeprom: at25: convertir a la API spi-mem\u0027) introdujo un b\u00fafer de rebote adicional asignado din\u00e1micamente cuyo tama\u00f1o es exactamente el tama\u00f1o de la transferencia, lo que llev\u00f3 a un desbordamiento de b\u00fafer en el controlador fsl-cpm cuando ese tama\u00f1o es impar.\\n\\nA\u00f1adir la verificaci\u00f3n de paridad de longitud faltante y permanecer en el modo de 8 bits cuando la longitud no es par.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"drivers/spi/spi-fsl-spi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"60afe299bb541a928ba39bcb4ae8d3e428d1c5a5\",\"lessThan\":\"c8f1d35076b78df61ace737e41cc1f4b7b63236c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4badd33929c05ed314794b95f1af1308f7222be8\",\"lessThan\":\"9c34a4a2ead00979d203a8c16bea87f0ef5291d8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7f6738e003b364783f3019fdf6e7645bc8dd1643\",\"lessThan\":\"837a23a11e0f734f096c7c7b0778d0e625e3dc87\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\"lessThan\":\"3dd6d01384823e1bd8602873153d6fc4337ac4fe\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\"lessThan\":\"743cebcbd1b2609ec5057ab474979cef73d1b681\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\"lessThan\":\"be0b613198e6bfa104ad520397cab82ad3ec1771\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fc96ec826bced75cc6b9c07a4ac44bbf651337ab\",\"lessThan\":\"1417927df8049a0194933861e9b098669a95c762\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"42c04316d9275ec267d36e5e9064cd56c9884148\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"dc120f2d35b030390a2bc0f94dd5f37e900cae91\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b558275c1b040f0e5aa56c862241f9212b6118c3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b9d9e8856f1c83e4277403f9b4c369b322ebcb12\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"36a6d0f66c874666caf4e8be155b1be30f6231be\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"5.10.181\",\"lessThan\":\"5.10.248\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.15.114\",\"lessThan\":\"5.15.198\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.29\",\"lessThan\":\"6.1.160\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.14.316\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.284\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.244\",\"lessThan\":\"5.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.16\",\"lessThan\":\"6.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.3.3\",\"lessThan\":\"6.4\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"drivers/spi/spi-fsl-spi.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"6.4\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"6.4\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.248\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.198\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.160\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.120\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.64\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.3\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.19\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"V3.1.6\",\"lessThan\":\"*\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1417927df8049a0194933861e9b098669a95c762\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/3dd6d01384823e1bd8602873153d6fc4337ac4fe\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/743cebcbd1b2609ec5057ab474979cef73d1b681\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/837a23a11e0f734f096c7c7b0778d0e625e3dc87\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9c34a4a2ead00979d203a8c16bea87f0ef5291d8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/be0b613198e6bfa104ad520397cab82ad3ec1771\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c8f1d35076b78df61ace737e41cc1f4b7b63236c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-019113.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "None",
      "current_release_date": "2026-06-28T11:45:12+00:00",
      "cve": "CVE-2025-68773",
      "id": "CVE-2025-68773",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "274",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: spi: fsl-cpm: Check length parity before switching to 16 bit mode",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-68773.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.