Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-68312

usbnet: Prevents free active kevent

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.4.302, 5.10.247, 5.15.197, 4.10, 4.15, and 3 more
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause of this issue are: 1. When probing the usbnet device, executing usbnet_link_change(dev, 0, 0); put the kevent work in global workqueue. However, the kevent has not yet been scheduled when the usbnet device is unregistered. Therefore, executing free_netdev() results in the "free active object (kevent)" error reported here. 2. Another factor is that when calling usbnet_disconnect()->unregister_netdev(), if the usbnet device is up, ndo_stop() is executed to cancel the kevent. However, because the device is not up, ndo_stop() is not executed. The solution to this problem is to cancel the kevent before executing free_netdev().

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  3. Record last updated

Affected versions

  • Linux Linux

    From 5.4.211 · fixed in 5.4.302; From 5.10.137 · fixed in 5.10.247; From 5.15.61 · fixed in 5.15.197; From 4.9.326 · fixed in 4.10; From 4.14.291 · fixed in 4.15; From 4.19.256 · fixed in 4.20; From 5.18.18 · fixed in 5.19; From 5.19.2 · fixed in 5.20

  • Linux Linux

    6.0

References 8

git.kernel.org