CVE-2025-68290
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: most: usb: fix double free on late probe failure The MOST subsystem has a non-standard registration function which frees the interface on registration failures and on deregistration. This unsurprisingly leads to bugs in the MOST drivers, and a couple of recent changes turned a reference underflow and use-after-free in the USB driver into several double free and a use-after-free on late probe failures.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedDec 16, 2025
First seenDec 16, 2025
How to fix
Update
- Linux Linux90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154, a4c4118c2af284835b16431bbfe77e0130c06fef, 0dece48660be16918ecf2dbdc7193e8be03e1693, 993bfdc3842893c394de13c8200c338ebb979589, 2274767dc02b756b25e3db1e31c0ed47c2a78442, 8d8ffefe3d5d8b7b73efb866db61130107299c5c, baadf2a5c26e802a46573eaad331b427b49aaa36 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < a4c4118c2af284835b16431bbfe77e0130c06fef, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 0dece48660be16918ecf2dbdc7193e8be03e1693, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 993bfdc3842893c394de13c8200c338ebb979589, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 2274767dc02b756b25e3db1e31c0ed47c2a78442, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < 8d8ffefe3d5d8b7b73efb866db61130107299c5c, 723de0f9171eeb49a3ae98cae82ebbbb992b3a7c ≤ v < baadf2a5c26e802a46573eaad331b427b49aaa36, 5.6 | 90e6ce2b1b19fb8b9d4afee69f40e4c6a4791154, a4c4118c2af284835b16431bbfe77e0130c06fef, 0dece48660be16918ecf2dbdc7193e8be03e1693, 993bfdc3842893c394de13c8200c338ebb979589, 2274767dc02b756b25e3db1e31c0ed47c2a78442, 8d8ffefe3d5d8b7b73efb866db61130107299c5c, baadf2a5c26e802a46573eaad331b427b49aaa36 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.