Use-After-Free Vulnerability in Linux Kernel USB Type-C Driver by Vendor Linux

CVE-2025-68323

What is CVE-2025-68323?

A use-after-free vulnerability in the Linux Kernel USB Type-C driver arises when the control structures are not properly managed during removal, allowing for potential access to freed memory. This occurs because a delayed work scheduled in the probing function is not canceled, leading to scenarios where freed structures may still be accessed. The race condition has a window of up to 3 seconds, making it reproducible. Affected components can experience operations on already-deallocated memory, posing significant risks for system stability and security.

References