CVE-2025-68204 — Missing Release of Resource after Effective Lifetime in Linux
Severity
7.8HIGHOSV
OSV3.2
No vectorEPSS
0.1%
top 79.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
pmdomain: arm: scmi: Fix genpd leak on provider registration failure
If of_genpd_add_provider_onecell() fails during probe, the previously
created generic power domains are not removed, leading to a memory leak
and potential kernel crash later in genpd_debug_add().
Add proper error handling to unwind the initialized domains before
returning from probe to ensure all resources are correctly released on
failure.
Example crash t…
Affected Packages7 packages
▶CVEListV5linux/linux898216c97ed2ebfffda659ce12388da43534de6c — 18249a167ffd91b4b4fbd92afd4ddcbf3af81f35+8