CVE-2025-68307 — Missing Release of Resource after Effective Lifetime in Linux
Severity
7.2HIGHOSV
OSV3.2
No vectorEPSS
0.0%
top 89.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 16
Latest updateApr 9
Description
In the Linux kernel, the following vulnerability has been resolved:
can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs
The driver lacks the cleanup of failed transfers of URBs. This reduces the
number of available URBs per error by 1. This leads to reduced performance
and ultimately to a complete stop of the transmission.
If the sending of a bulk URB fails do proper cleanup:
- increase netdev stats
- mark the echo_sbk as free
- free the driver's context and do accoun…
Affected Packages7 packages
▶CVEListV5linux/linuxd08e973a77d128b25e01a08c34d89593fdf222da — f7a5560675bd85efaf16ab01a43053670ff2b000+5