CVE-2025-68192

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: usb: qmi_wwan: initialize MAC header offset in qmimux_rx_fixup

Raw IP packets have no MAC header, leaving skb->mac_header uninitialized.

This can trigger kernel panics on ARM64 when xfrm or other subsystems

access the offset due to strict alignment checks.

Initialize the MAC header to prevent such crashes.

This can trigger kernel panics on ARM when running IPsec over the

qmimux0 interface.

Example trace:

Internal error: Oops: 000000009600004f [#1] SMP

CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.34-gbe78e49cb433 #1

Hardware name: LS1028A RDB Board (DT)

pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)

pc : xfrm_input+0xde8/0x1318

lr : xfrm_input+0x61c/0x1318

sp : ffff800080003b20

Call trace:

xfrm_input+0xde8/0x1318

xfrm6_rcv+0x38/0x44

xfrm6_esp_rcv+0x48/0xa8

ip6_protocol_deliver_rcu+0x94/0x4b0

ip6_input_finish+0x44/0x70

ip6_

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References