Linux Kernel x86_match_min_microcode_rev memory corruption

Summaryinfo

A vulnerability, which was classified as critical, was found in Linux Kernel. The impacted element is the function x86_match_min_microcode_rev. Executing a manipulation can lead to memory corruption. This vulnerability is tracked as CVE-2025-68195. No exploit exists. It is advisable to implement a patch to correct this issue.

Detailsinfo

A vulnerability classified as critical was found in Linux Kernel (affected version not known). This vulnerability affects the function x86_match_min_microcode_rev. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Add missing terminator for zen5_rdseed_microcode Running x86_match_min_microcode_rev() on a Zen5 CPU trips up KASAN for an out of bounds access.

The advisory is shared for download at git.kernel.org. This vulnerability was named CVE-2025-68195 since 12/16/2025. The exploitation appears to be easy. There are known technical details, but no exploit is available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 02/21/2026).

The vulnerability scanner Nessus provides a plugin with the ID 279019 (Linux Distros Unpatched Vulnerability : CVE-2025-68195), which helps to determine the existence of the flaw in a target environment.

Applying the patch 4c6b56a76478bd1ab609827c571905386c11d308/f1fdffe0afea02ba783acfe815b6a60e7180df40 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org.

The vulnerability is also documented in the databases at Tenable (279019) and CERT Bund (WID-SEC-2025-2868). Once again VulDB remains the best source for vulnerability data.

Affected

• Debian Linux
• Amazon Linux 2
• Red Hat Enterprise Linux
• Ubuntu Linux
• SUSE Linux
• Oracle Linux
• SUSE openSUSE
• RESF Rocky Linux
• Open Source Linux Kernel

Productinfo

Type

• Operating System

Vendor

• Linux

Name

• Kernel

License

• open-source

Website

• Vendor: https://www.kernel.org/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion