usb gadget

  1. CVE-2025-68289 Linux Kernel Fix for USB Gadget EEM Memory Leak

    The Linux kernel vulnerability tracked as CVE‑2025‑68289 — described as "usb: gadget: f_eem: Fix memory leak in eem_unwrap" — closes a small but operationally important resource‑management hole in the USB gadget Ethernet Emulation Model (f_eem) function by hardening the error path for...
  2. Linux Kernel USB Gadget UDC Teardown Race Fix CVE-2025-68282

    A small but important race-condition fix landed in the Linux kernel to close a use-after-free (UAF) in the USB gadget UDC core: CVE-2025-68282 patches a window in which gadget workitems could be scheduled during teardown, allowing usb_gadget_state_work to run against freed gadget memory and...
  3. Linux USB Gadget Race Condition Patch CVE-2025-40315

    A small but important Linux-kernel robustness fix has been recorded as CVE-2025-40315: a race condition in the USB Gadget full-speed (f_fs) function driver that could cause a kernel NULL-pointer dereference after an endpoint is enabled; operators should treat this as an availability risk, verify...
  4. Linux cdns3 USB gadget UAF: CVE-2025-40314 Fix and Mitigation Guide

    A new Linux-kernel vulnerability, tracked as CVE‑2025‑40314, has been published: a use‑after‑free in the cdns3 USB gadget driver that can occur when the cdnsp gadget fails to initialize or during gadget exit, and upstream kernel maintainers have merged a compact fix into recent stable trees to...