CVE-2025-68754 — Double Free in Linux
19 documents7 sources
Severity
7.2HIGHOSV
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 5
Latest updateApr 6
Description
In the Linux kernel, the following vulnerability has been resolved:
rtc: amlogic-a4: fix double free caused by devm
The clock obtained via devm_clk_get_enabled() is automatically managed
by devres and will be disabled and freed on driver detach. Manually
calling clk_disable_unprepare() in error path and remove function
causes double free.
Remove the redundant clk_disable_unprepare() calls from the probe
error path and aml_rtc_remove(), allowing the devm framework to
automatically manage the c…
Affected Packages5 packages
▶CVEListV5linux/linuxc89ac9182ee297597f1c6971045382bae19c3f9d — 9fed02c16488050cd4e33e045506336b216d7301+3