CVE-2025-68328: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-68328 is a kernel bug in the Linux kernel's firmware: stratix10-svc driver caused by incorrect usage of platform_set_drvdata and dev_set_drvdata, where both functions write the same data and override each other. This logic error causes the rmmod of the SVC driver to fail and triggers a kernel panic during kthread_stop and FIFO free operations. The vulnerability was published on December 22, 2025, and affects Linux kernel versions from 5.4 onward, with patches available in stable releases including 5.10.247, 5.15.197, 6.1.159, 6.6.119, 6.12.61, 6.17.11, and 6.18. It carries a CVSS v3.1 base score of 6.1 (Medium) (Red Hat CVE, Feedly).

The root cause is an incorrect driver data management pattern in the Stratix10 service (SVC) firmware driver (drivers/firmware/stratix10-svc.c). The driver calls both platform_set_drvdata() and dev_set_drvdata() with the same data pointer, causing one to overwrite the other's stored reference. When the module is subsequently unloaded via rmmod, the driver retrieves a stale or incorrect pointer, leading to a kernel panic in kthread_stop() and during FIFO memory deallocation. The fix corrects the data storage logic so each function stores the appropriate distinct data. No formal CWE classification has been assigned by NVD at this time (Red Hat CVE, kernel.org patches).

Exploitation of this vulnerability results in a kernel panic (system crash) when the Stratix10 SVC driver is unloaded, causing a denial of service on affected systems. The availability impact is rated High, while integrity impact is Low and there is no confidentiality impact. Systems using Intel Stratix10 SoC-based hardware (e.g., certain FPGA platforms) that load and unload the stratix10-svc kernel module are at risk of unplanned reboots or system instability (Feedly, Red Hat CVE).

Update the Linux kernel to a patched stable version: 5.10.247, 5.15.197, 6.1.159, 6.6.119, 6.12.61, 6.17.11, or 6.18 and later. Ubuntu users should apply the updates provided in USN-8094-1 through USN-8094-5. As a short-term workaround, avoid unloading the stratix10-svc kernel module on affected systems until the patch is applied. Monitor system logs for kernel panic messages related to kthread_stop or FIFO operations if the driver is in use (Ubuntu USN-8094-1, Feedly).

The vulnerability received routine coverage from Linux security aggregators and distribution security teams. Ubuntu issued a series of security notices (USN-8094-1 through USN-8094-5) addressing this and related kernel issues. Detection signatures were added by Nessus (plugin 279567, 302766) and Qualys across multiple detection IDs. No notable researcher commentary or significant social media discussion was observed beyond standard CVE tracking (Ubuntu USN-8094-1, Tenable Nessus).