CVE-2025-68323 — Linux vulnerability
19 documents7 sources
Severity
7.2HIGHOSV
No vectorEPSS
0.1%
top 82.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 18
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
usb: typec: ucsi: fix use-after-free caused by uec->work
The delayed work uec->work is scheduled in gaokun_ucsi_probe()
but never properly canceled in gaokun_ucsi_remove(). This creates
use-after-free scenarios where the ucsi and gaokun_ucsi structure
are freed after ucsi_destroy() completes execution, while the
gaokun_ucsi_register_worker() might be either currently executing
or still pending in the work queue. The already-fr…
Affected Packages5 packages
▶CVEListV5linux/linux00327d7f2c8c512c9b168daae02c8b989f79ec71 — d8ac85c76a4279979b917d4b2f9c6b07d9783003+3