CVE-2025-68360

CVE-2025-68360 is a vulnerability in the Linux kernel's mt76 Wi-Fi driver, specifically affecting devices that utilize both "wed" and "wed_hif2" for traffic offloading, such as the MT7996. The flaw arises from the driver incorrectly assuming the use of the primary "wed" device in callbacks, leading to a kernel crash if "wed_hif2" is active (e.g., on a 6GHz link). This results in a denial-of-service condition. The vulnerability has a FAUCET Risk Score of 7/100, indicating a low severity. The attack vector is likely local, requiring specific hardware configurations and potentially privileged access to trigger the kernel crash. The complexity appears moderate, given the specific driver interaction required. The primary impact is system instability and denial of service. There is no evidence of active exploitation, nor is exploit code publicly available on platforms like Metasploit or ExploitDB. While there is some community discussion and media coverage, it primarily pertains to security updates rather than active exploitation. This CVE is not listed on the CISA KEV catalog.