cve 2025 68217

CVE-2025-68217 is a Linux kernel vulnerability in the Pegasus Notetaker USB driver that can cause a denial-of-service condition. The flaw involves a buffer size bug where a malicious or malformed USB device forces the kernel to allocate an undersized transfer buffer, leading to an out-of-bounds read when parsing interrupt packets. This can result in a kernel panic and, under certain conditions, broader memory-safety issues. The tag covers discussions about the vulnerability's impact, affected systems, and potential mitigations for Linux users.