CVE-2025-68773

Published Jan 13, 2026

Overview

CVE-2025-68773 is a known-severity vulnerability. It was published on January 13, 2026.

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

spi: fsl-cpm: Check length parity before switching to 16 bit mode

Commit fc96ec826bce ("spi: fsl-cpm: Use 16 bit mode for large transfers

with even size") failed to make sure that the size is really even

before switching to 16 bit mode. Until recently the problem went

unnoticed because kernfs uses a pre-allocated bounce buffer of size

PAGE_SIZE for reading EEPROM.

But commit 8ad6249c51d0 ("eeprom: at25: convert to spi-mem API")

introduced an additional dynamically allocated bounce buffer whose size

is exactly the size of the transfer, leading to a buffer overrun in

the fsl-cpm driver when that size is odd.

Add the missing length parity verification and remain in 8 bit mode

when the length is not even.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Ref git.kernel.org/stable/c/1417927df8049a0194933861e9b098669a95c762 Ref git.kernel.org/stable/c/3dd6d01384823e1bd8602873153d6fc4337ac4fe Ref git.kernel.org/stable/c/743cebcbd1b2609ec5057ab474979cef73d1b681 Ref git.kernel.org/stable/c/837a23a11e0f734f096c7c7b0778d0e625e3dc87 Ref git.kernel.org/stable/c/9c34a4a2ead00979d203a8c16bea87f0ef5291d8 Ref git.kernel.org/stable/c/be0b613198e6bfa104ad520397cab82ad3ec1771 Ref git.kernel.org/stable/c/c8f1d35076b78df61ace737e41cc1f4b7b63236c Ref cert-portal.siemens.com/productcert/html/ssa-019113.html

Frequently Asked Questions

What is CVE-2025-68773?

CVE-2025-68773 is a known-severity vulnerability. It was published on January 13, 2026.

How severe is CVE-2025-68773?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2025-68773?

How can CyberStrike help with CVE-2025-68773?

CyberStrike's AI-powered security agents can automatically detect CVE-2025-68773 across your infrastructure using autonomous pentesting, DAST scanning, and HackBrowser. The platform continuously monitors for known vulnerabilities and provides actionable remediation guidance prioritized by real-world exploitability.