usb gadget

The Linux kernel vulnerability tracked as CVE‑2025‑68289 — described as "usb: gadget: f_eem: Fix memory leak in eem_unwrap" — closes a small but operationally important resource‑management hole in the USB gadget Ethernet Emulation Model (f_eem) function by hardening the error path for...

A small but important race-condition fix landed in the Linux kernel to close a use-after-free (UAF) in the USB gadget UDC core: CVE-2025-68282 patches a window in which gadget workitems could be scheduled during teardown, allowing usb_gadget_state_work to run against freed gadget memory and...

A small but important Linux-kernel robustness fix has been recorded as CVE-2025-40315: a race condition in the USB Gadget full-speed (f_fs) function driver that could cause a kernel NULL-pointer dereference after an endpoint is enabled; operators should treat this as an availability risk, verify...

A new Linux-kernel vulnerability, tracked as CVE‑2025‑40314, has been published: a use‑after‑free in the cdns3 USB gadget driver that can occur when the cdnsp gadget fails to initialize or during gadget exit, and upstream kernel maintainers have merged a compact fix into recent stable trees to...