{"schema_version":"1.9.0","id":"CVE-2025-68731","published":"2025-12-24T10:33:13.964Z","modified":"2026-08-12T03:51:41.179093019Z","related":["openSUSE-SU-2026:10039-1","openSUSE-SU-2026:10301-1"],"summary":"accel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\naccel/amdxdna: Fix an integer overflow in aie2_query_ctx_status_array()\n\nThe unpublished smatch static checker reported a warning.\n\ndrivers/accel/amdxdna/aie2_pci.c:904 aie2_query_ctx_status_array()\nwarn: potential user controlled sizeof overflow\n'args->num_element * args->element_size' '1-u32max(user) * 1-u32max(user)'\n\nEven this will not cause a real issue, it is better to put a reasonable\nlimitation for element_size and num_element. Add condition to make sure\nthe input element_size <= 4K and num_element <= 1K.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"2f509fe6a42cda845890273fe759fb7ba9edad97"},{"fixed":"359653edd5374fbba28f93043554dcc494aee85f"},{"fixed":"9e16c8bf9aebf629344cfd4cd5e3dc7d8c3f7d82"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68731.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.0"},{"fixed":"6.18.2"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68731.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/359653edd5374fbba28f93043554dcc494aee85f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9e16c8bf9aebf629344cfd4cd5e3dc7d8c3f7d82"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68731.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68731"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68731.json"}}