CVE-2025-68289 — Missing Release of Memory after Effective Lifetime in Linux
53 documents8 sources
Severity
7.8HIGHOSV
OSV7.2OSV3.2
No vectorEPSS
0.1%
top 79.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_eem: Fix memory leak in eem_unwrap
The existing code did not handle the failure case of usb_ep_queue in the
command path, potentially leading to memory leaks.
Improve error handling to free all allocated resources on usb_ep_queue
failure. This patch continues to use goto logic for error handling, as the
existing error handling is complex and not easily adaptable to auto-cleanup
helpers.
kmemleak results:
unref…
Affected Packages7 packages
▶CVEListV5linux/linux3b545788505b2e2883aff13bdddeacaf88942a4f — a9985a88b2fc29fbe1657fe8518908e261d6889c+14