Use-After-Free Vulnerability in Linux Kernel Affecting SCSI Host Adapters
CVE-2025-68324

Currently unrated

Key Information:

Vendor: Linux
Status: Linux
Vendor: CVE Published:; 18 December 2025

What is CVE-2025-68324?

A use-after-free vulnerability has been identified in the Linux kernel's SCSI subsystem, specifically affecting the IMM parallel port SCSI host adapter. This occurs when the delayed work item 'imm_tq', initialized in imm_attach() and scheduled through imm_queuecommand(), is still processing commands after the adapter has been detached via imm_detach(). When imm_detach() is called, it deallocates the imm_struct memory, but if a delayed work continues running, it may access this freed memory, causing potential memory corruption issues. To mitigate this, adding disable_delayed_work_sync() in imm_detach() will ensure that any pending delayed work is properly canceled before the memory is released.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch