A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.61/6.17.11/6.18.0. The impacted element is an unknown function of the component ESR IE Parser. Such manipulation leads to out-of-bounds read.
This vulnerability is traded as CVE-2025-68254. Access to the local network is required for this attack to succeed. There is no exploit available.
The affected component should be upgraded.
