CVE-2025-68192

A kernel panic vulnerability was found in the QMI WWAN USB driver in the Linux kernel. For raw IP packets without MAC headers, skb->mac_header is left uninitialized. On ARM64 systems with strict alignment requirements, subsequent access by IPsec (xfrm) or other subsystems causes kernel panics.

This primarily affects ARM64 systems using Qualcomm QMI-based cellular modems with IPsec VPN configurations. x86 systems are less likely to trigger the alignment fault but the uninitialized value is still problematic.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the qmi_wwan module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.