Search: CVE-2025-68301

A critical vulnerability in the Linux kernel's atlantic network driver allows an out-of-bounds write due to improper handling of packet fragments exceeding the maximum allowed. This can cause a kernel panic when processing large multi-descriptor packets. The issue arises because the driver does not check the total number of fragments before adding them, leading to an overflow in skb_add_rx_frag_netmem(). The vulnerability has been fixed by improving fragment accounting and adding earlier overflow checks.