CVE-2025-68172
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm The clock obtained via devm_clk_get_enabled() is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clk_disable_unprepare() in error path and remove function causes double free. Remove the manual clock cleanup in both aspeed_acry_probe()'s error path and aspeed_acry_remove().
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux0dd6474ced33489076e6c0f3fe5077bf12e85b28, 29d0504077044a7e1ffbd09a6118018d5954a6e5, e8407dfd267018f4647ffb061a9bd4a6d7ebacc6, 3c9bf72cc1ced1297b235f9422d62b613a3fdae9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 2f1cf4e50c956f882c9fc209c7cded832b67b8a3 ≤ v < 0dd6474ced33489076e6c0f3fe5077bf12e85b28, 2f1cf4e50c956f882c9fc209c7cded832b67b8a3 ≤ v < 29d0504077044a7e1ffbd09a6118018d5954a6e5, 2f1cf4e50c956f882c9fc209c7cded832b67b8a3 ≤ v < e8407dfd267018f4647ffb061a9bd4a6d7ebacc6, 2f1cf4e50c956f882c9fc209c7cded832b67b8a3 ≤ v < 3c9bf72cc1ced1297b235f9422d62b613a3fdae9, 6.3 | 0dd6474ced33489076e6c0f3fe5077bf12e85b28, 29d0504077044a7e1ffbd09a6118018d5954a6e5, e8407dfd267018f4647ffb061a9bd4a6d7ebacc6, 3c9bf72cc1ced1297b235f9422d62b613a3fdae9 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.