Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2025-68804 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding the driver, another kthread `cros_ec_console_log_work` is still accessing the device, resulting an UAF and crash. The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.

Metrics

CVSS 3.x Severity and Vector Strings:

VolerionCVSS-B:6.5 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://git.kernel.org/stable/c/24a2062257bbdfc831de5ed21c27b04b5bdf2437	kernel.org	Source CodeVendor
https://git.kernel.org/stable/c/27037916db38e6b78a0242031d3b93d997b84020	kernel.org
https://git.kernel.org/stable/c/393b8f9bedc7806acb9c47cefdbdb223b4b6164b	kernel.org	Source CodeVendor
https://git.kernel.org/stable/c/4701493ba37654b3c38b526f6591cf0b02aa172f	kernel.org	Source CodeVendor
https://git.kernel.org/stable/c/8dc1f5a85286290dbf04dd5951d020570f49779b	kernel.org	Source CodeVendor
https://git.kernel.org/stable/c/944edca81e7aea15f83cf9a13a6ab67f711e8abd	kernel.org	Source CodeVendor
https://git.kernel.org/stable/c/e1da6e399df976dd04c7c73ec008bc81da368a95	kernel.org

see all 7 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

Product	Versions
Linux kernel	All versions
CPE cpe:2.3:o:kernel:linux_kernel:::::::: cpe:2.3:o:linux:kernel:::::::: cpe:2.3:o:linux:linux_kernel:::::::: cpe:2.3:o:linux:linux_kernel::::::endpoint_security_linux_threat_prevention::* cpe:2.3:a:linux:linux_kernel:::::::: Remediation Upgrade: linux-24a2062257bbdfc831de5ed21c27b04b5bdf2437moderate efforthttps://git.kernel.org/stable/c/24a2062257bbdfc831de5ed21c27b04b5bdf2437 Upgrade: linux-393b8f9bedc7806acb9c47cefdbdb223b4b6164bmoderate efforthttps://git.kernel.org/stable/c/393b8f9bedc7806acb9c47cefdbdb223b4b6164b Upgrade: linux-4701493ba37654b3c38b526f6591cf0b02aa172fmoderate efforthttps://git.kernel.org/stable/c/4701493ba37654b3c38b526f6591cf0b02aa172f Upgrade: linux-8dc1f5a85286290dbf04dd5951d020570f49779bmoderate efforthttps://git.kernel.org/stable/c/8dc1f5a85286290dbf04dd5951d020570f49779b Upgrade: linux-944edca81e7aea15f83cf9a13a6ab67f711e8abdmoderate efforthttps://git.kernel.org/stable/c/944edca81e7aea15f83cf9a13a6ab67f711e8abd
platform/chrome cros_ec_ishtp	All versions
CPE No CPEs found in CPE dictionary for this product. Remediation No remediation found in references.

Change History

3 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	kernel.org
Jan 19, 2026	CVE Modified	kernel.org
Jan 13, 2026	New CVE Received	kernel.org