CVE-2025-68290 — Double Free in Linux
53 documents8 sources
Severity
7.8HIGHOSV
OSV7.2OSV3.2
No vectorEPSS
0.1%
top 79.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
most: usb: fix double free on late probe failure
The MOST subsystem has a non-standard registration function which frees
the interface on registration failures and on deregistration.
This unsurprisingly leads to bugs in the MOST drivers, and a couple of
recent changes turned a reference underflow and use-after-free in the
USB driver into several double free and a use-after-free on late probe
failures.
Affected Packages7 packages
▶CVEListV5linux/linux723de0f9171eeb49a3ae98cae82ebbbb992b3a7c — 90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154+7