Driver Issue in Linux Kernel Affecting gs_usb

CVE-2025-68307

What is CVE-2025-68307?

A vulnerability in the Linux kernel's gs_usb driver has been identified that affects the handling of failed transmissions of URBs (USB Request Blocks). This issue can result in a buildup of failed transmissions, effectively reducing the number of available URBs and leading to diminished performance. In severe cases, it may even halt all transmission processes. Proper management and cleanup of failed bulk URB transfers are essential to ensure network device statistics are updated, resources like echo_sbk are marked as free, and that the driver's context is released accordingly. Addressing this vulnerability requires careful attention to the handling mechanisms for sending and managing URBs within the gs_usb driver.

References