« Volver al listado

CVE-2025-68290

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

most: usb: fix double free on late probe failure

The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration.

This unsurprisingly leads to bugs in the MOST drivers, and a couple of recent changes turned a reference underflow and use-after-free in the USB driver into several double free and a use-after-free on late probe failures.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-68290",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c",
              "lessThan": "90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c",
              "lessThan": "a4c4118c2af284835b16431bbfe77e0130c06fef",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c",
              "lessThan": "0dece48660be16918ecf2dbdc7193e8be03e1693",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c",
              "lessThan": "993bfdc3842893c394de13c8200c338ebb979589",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c",
              "lessThan": "2274767dc02b756b25e3db1e31c0ed47c2a78442",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c",
              "lessThan": "8d8ffefe3d5d8b7b73efb866db61130107299c5c",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "723de0f9171eeb49a3ae98cae82ebbbb992b3a7c",
              "lessThan": "baadf2a5c26e802a46573eaad331b427b49aaa36",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/most/most_usb.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.6",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.247",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.197",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.159",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.119",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.61",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.17.11",
              "versionType": "semver",
              "lessThanOrEqual": "6.17.*"
            },
            {
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/most/most_usb.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-16T16:16:07.860",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/0dece48660be16918ecf2dbdc7193e8be03e1693",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/2274767dc02b756b25e3db1e31c0ed47c2a78442",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/8d8ffefe3d5d8b7b73efb866db61130107299c5c",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/993bfdc3842893c394de13c8200c338ebb979589",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a4c4118c2af284835b16431bbfe77e0130c06fef",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/baadf2a5c26e802a46573eaad331b427b49aaa36",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmost: usb: fix double free on late probe failure\n\nThe MOST subsystem has a non-standard registration function which frees\nthe interface on registration failures and on deregistration.\n\nThis unsurprisingly leads to bugs in the MOST drivers, and a couple of\nrecent changes turned a reference underflow and use-after-free in the\nUSB driver into several double free and a use-after-free on late probe\nfailures."
    }
  ],
  "lastModified": "2026-06-17T09:58:52.820",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}