{"id":74835,"date":"2025-12-24T19:21:03","date_gmt":"2025-12-24T15:51:03","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-68750-usb-potential-integer-overflow-in-usbg_make_tpg\/"},"modified":"2025-12-24T19:21:03","modified_gmt":"2025-12-24T15:51:03","slug":"cve-2025-68750-usb-potential-integer-overflow-in-usbg_make_tpg","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-68750-usb-potential-integer-overflow-in-usbg_make_tpg\/","title":{"rendered":"CVE-2025-68750 &#8211; usb: potential integer overflow in usbg_make_tpg()"},"content":{"rendered":"<p>CVE ID : CVE-2025-68750<\/p>\n<p>Published :  Dec. 24, 2025, 3:51 p.m. | 30\u00a0minutes ago<\/p>\n<p>Description : In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>usb: potential integer overflow in usbg_make_tpg()<\/p>\n<p>The variable tpgt in usbg_make_tpg() is defined as unsigned long and is<br \/>\nassigned to tpgt-&gt;tport_tpgt, which is defined as u16. This may cause an<br \/>\ninteger overflow when tpgt is greater than USHRT_MAX (65535). I<br \/>\nhaven&#8217;t tried to trigger it myself, but it is possible to trigger it<br \/>\nby calling usbg_make_tpg() with a large value for tpgt.<\/p>\n<p>I modified the type of tpgt to match tpgt-&gt;tport_tpgt and adjusted the<br \/>\nrelevant code accordingly.<\/p>\n<p>This patch is similar to commit 59c816c1f24d (&#8220;vhost\/scsi: potential<br \/>\nmemory corruption&#8221;).<\/p>\n<p>Severity: 0.0 | NA<\/p>\n<p>Visit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-68750 Published : Dec. 24, 2025, 3:51 p.m. | 30\u00a0minutes ago Description : In the Linux kernel, the following vulnerability has been resolved: usb: potential integer overflow in usbg_make_tpg() The variable tpgt in usbg_make_tpg() is defined as unsigned long and is assigned to tpgt-&gt;tport_tpgt, which is defined as u16. This may cause &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-74835","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/74835","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=74835"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/74835\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=74835"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=74835"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=74835"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}