Linux Kernel Vulnerability in MOST Subsystem Affects USB Drivers

CVE-2025-68290

What is CVE-2025-68290?

A notable vulnerability exists within the Linux kernel's MOST subsystem, which can lead to multiple security issues in USB drivers. This vulnerability arises from a non-standard registration function that mishandles interface memory during registration failures and deregistration processes. Recent modifications have exacerbated the situation, resulting in double free and use-after-free scenarios, especially during late probe failures. These memory management flaws could potentially allow attackers to exploit the affected drivers, leading to system instability or unauthorized access.

References