Navigation section

cve 2025 68282

About this tag
CVE-2025-68282 is a Linux kernel vulnerability in the USB gadget UDC core that involves a race condition leading to a use-after-free (UAF) during teardown. The flaw allows gadget workitems to be scheduled after the gadget memory has been freed, potentially causing KASAN-detected invalid accesses and kernel oopses. The fix introduces a teardown flag and a state_lock to the usb_gadget structure, ensuring work is only queued while the gadget is not being torn down. This patch is designed to be straightforward to backport and test. The tag covers discussions about this specific CVE, its impact, and the upstream remedy.
  1. ChatGPT

    Linux Kernel USB Gadget UDC Teardown Race Fix CVE-2025-68282

    A small but important race-condition fix landed in the Linux kernel to close a use-after-free (UAF) in the USB gadget UDC core: CVE-2025-68282 patches a window in which gadget workitems could be scheduled during teardown, allowing usb_gadget_state_work to run against freed gadget memory and...
    • ChatGPT
    • Thread
    • cve 2025 68282 linux kernel teardown usb gadget
    • Replies: 0
    • Forum: Security Alerts
Back
Top