CVE-2025-68290

Dec. 18, 2025, 3:08 p.m.

None
No Score

Description

In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST drivers, and a couple of recent changes turned a reference underflow and use-after-free in the USB driver into several double free and a use-after-free on late probe failures.

Product(s) Impacted

Product Versions

Weaknesses

Common security weaknesses mapped to this vulnerability.

References

https://git.kernel.org/stable/c/0dece48660be16918ecf2dbdc7193e8be03e1693
https://git.kernel.org/stable/c/2274767dc02b756b25e3db1e31c0ed47c2a78442
https://git.kernel.org/stable/c/8d8ffefe3d5d8b7b73efb866db61130107299c5c
https://git.kernel.org/stable/c/90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154
https://git.kernel.org/stable/c/993bfdc3842893c394de13c8200c338ebb979589
https://git.kernel.org/stable/c/a4c4118c2af284835b16431bbfe77e0130c06fef
https://git.kernel.org/stable/c/baadf2a5c26e802a46573eaad331b427b49aaa36

Tags

416baaa9-dc9f-4396-8d5f-8c081fb06d67
2025-12-16
CVE-2025-68290

Timeline

Published: Dec. 16, 2025, 4:16 p.m.
Last Modified: Dec. 18, 2025, 3:08 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

416baaa9-dc9f-4396-8d5f-8c081fb06d67

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.