A vulnerability described as critical has been identified in Linux Kernel up to 6.6.118/6.12.60/6.17.10. This vulnerability affects the function gs_usb_receive_bulk_callback of the component can. Executing manipulation can lead to privilege escalation.

This vulnerability is handled as CVE-2025-68342. The attack can only be done within the local network. There is not any exploit available.

Upgrading the affected component is recommended.