CVE-2025-68765

Published Jan 5, 2026

Overview

CVE-2025-68765 is a known-severity vulnerability. It was published on January 5, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add()

In mt7615_mcu_wtbl_sta_add(), an skb sskb is allocated. If the

subsequent call to mt76_connac_mcu_alloc_wtbl_req() fails, the function

returns an error without freeing sskb, leading to a memory leak.

Fix this by calling dev_kfree_skb() on sskb in the error handling path

to ensure it is properly released.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/1c3c234af9407256ed670c8752923a672eea4225 Ref git.kernel.org/stable/c/278bfed4529a0c9c9119f5a52ddafe69db61a75c Ref git.kernel.org/stable/c/4d42aba0ee49c0aa015c50c4f2a07cf8fa1c3a49 Ref git.kernel.org/stable/c/53d1548612670aa8b5d89745116cc33d9d172863 Ref git.kernel.org/stable/c/594ff8bb69e239678a8baa461827ce4bb90eff8f Ref git.kernel.org/stable/c/d6c91fc732698642f70c688324c98551b97b412c Ref git.kernel.org/stable/c/fb905e69941b44e03fe1a24e95328d45442b6d6d

Frequently Asked Questions

What is CVE-2025-68765?

CVE-2025-68765 is a known-severity vulnerability. It was published on January 5, 2026.

How severe is CVE-2025-68765?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2025-68765?

How can CyberStrike help with CVE-2025-68765?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-68765 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.