CVE-2025-68172 — Double Free in Linux
33 documents7 sources
Severity
3.2LOWOSV
No vectorEPSS
0.0%
top 90.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
crypto: aspeed - fix double free caused by devm
The clock obtained via devm_clk_get_enabled() is automatically managed
by devres and will be disabled and freed on driver detach. Manually
calling clk_disable_unprepare() in error path and remove function
causes double free.
Remove the manual clock cleanup in both aspeed_acry_probe()'s error
path and aspeed_acry_remove().
Affected Packages5 packages
▶CVEListV5linux/linux2f1cf4e50c956f882c9fc209c7cded832b67b8a3 — 0dd6474ced33489076e6c0f3fe5077bf12e85b28+4