CVE-2025-68760

Published Jan 5, 2026

Overview

CVE-2025-68760 is a known-severity vulnerability. It was published on January 5, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show

In iommu_mmio_write(), it validates the user-provided offset with the

check: `iommu->dbg_mmio_offset > iommu->mmio_phys_end - 4`.

This assumes a 4-byte access. However, the corresponding

show handler, iommu_mmio_show(), uses readq() to perform an 8-byte

(64-bit) read.

If a user provides an offset equal to `mmio_phys_end - 4`, the check

passes, and will lead to a 4-byte out-of-bounds read.

Fix this by adjusting the boundary check to use sizeof(u64), which

corresponds to the size of the readq() operation.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/0ec4aaf5f3f559716a6559f3d6d9616e9470bed6 Ref git.kernel.org/stable/c/a0c7005333f9a968abb058b1d77bbcd7fb7fd1e7 Ref git.kernel.org/stable/c/b959df804c33913dbfdb90750f2d693502b3d126

Frequently Asked Questions

What is CVE-2025-68760?

CVE-2025-68760 is a known-severity vulnerability. It was published on January 5, 2026.

How severe is CVE-2025-68760?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2025-68760?

How can CyberStrike help with CVE-2025-68760?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-68760 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.