In the Linux kernel, the following vulnerability has been resolved:

crypto: starfive - Correctly handle return of sg_nents_for_len

The return value of sg_nents_for_len was assigned to an unsigned long
in starfive_hash_digest, causing negative error codes to be converted
to large positive integers.

Add error checking for sg_nents_for_len and return immediately on
failure to prevent potential buffer overflows.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00026.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
7883d1b28a2b0e62edcacea22de6b36a1918b15a affected < 6cd14414394b4f3d6e1ed64b8241d1fcc2271820
7883d1b28a2b0e62edcacea22de6b36a1918b15a affected < 0c3854d65cc4402cb8c52d4d773450a06efecab6
7883d1b28a2b0e62edcacea22de6b36a1918b15a affected < 1af5c973dd744e29fa22121f43e8646b7a7a71a7
7883d1b28a2b0e62edcacea22de6b36a1918b15a affected < 9b3f71cf02e04cfaa482155e3078707fe7f8aef4
7883d1b28a2b0e62edcacea22de6b36a1918b15a affected < e9eb52037a529fbb307c290e9951a62dd728b03d
Linux Linux affected
Version Status Constraints
6.5 affected —
0 unaffected < 6.5
6.6.120 unaffected ≤ 6.6.*
6.12.63 unaffected ≤ 6.12.*
6.17.13 unaffected ≤ 6.17.*
6.18.2 unaffected ≤ 6.18.*
6.19 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0c3854d65cc4402cb8c52d4d773450a06efecab6 cve-icon cve-icon
https://git.kernel.org/stable/c/1af5c973dd744e29fa22121f43e8646b7a7a71a7 cve-icon cve-icon
https://git.kernel.org/stable/c/6cd14414394b4f3d6e1ed64b8241d1fcc2271820 cve-icon cve-icon
https://git.kernel.org/stable/c/9b3f71cf02e04cfaa482155e3078707fe7f8aef4 cve-icon cve-icon
https://git.kernel.org/stable/c/e9eb52037a529fbb307c290e9951a62dd728b03d cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026010552-CVE-2025-68763-de7e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-68763 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-68763 cve-icon
History

Sun, 11 Jan 2026 16:45:00 +0000

Type Values Removed Values Added
References

Mon, 05 Jan 2026 12:15:00 +0000

Type Values Removed Values Added
References

Mon, 05 Jan 2026 10:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: crypto: starfive - Correctly handle return of sg_nents_for_len The return value of sg_nents_for_len was assigned to an unsigned long in starfive_hash_digest, causing negative error codes to be converted to large positive integers. Add error checking for sg_nents_for_len and return immediately on failure to prevent potential buffer overflows.
Title crypto: starfive - Correctly handle return of sg_nents_for_len
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-02-09T08:33:07.993Z

Reserved: 2025-12-24T10:30:51.034Z

Link: CVE-2025-68763

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-01-05T10:15:57.467

Modified: 2026-01-11T17:15:58.633

Link: CVE-2025-68763

cve-icon Redhat

Severity :

Publid Date: 2026-01-05T00:00:00Z

Links: CVE-2025-68763 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.