CVE-2025-68804

EUVD-2026-2293
In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

After unbinding the driver, another kthread `cros_ec_console_log_work`
is still accessing the device, resulting an UAF and crash.

The driver doesn't unregister the EC device in .remove() which should
shutdown sub-devices synchronously.  Fix it.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.170-3
fixed
bookworm (security)
6.1.172-1
fixed
bullseye
vulnerable
bullseye (security)
5.10.251-5
fixed
forky
7.0.9-1
fixed
sid
7.0.9-1
fixed
trixie
6.12.86-1
fixed
trixie (security)
6.12.90-1
fixed
linux-6.1
bullseye (security)
6.1.172-1~deb11u1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cluster-md-kmp-default
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
dlm-kmp-default
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
gfs2-kmp-default
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
kernel-64kb
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-azure
suse enterprise sap 15 SP7
6.4.0-150700.20.27.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.27.1
fixed
kernel-default
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-default-base
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1.150700.17.21.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1.150700.17.21.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1.150600.12.40.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1.150700.17.21.1
fixed
kernel-docs
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-macros
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-obs-build
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-source
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-source-azure
suse enterprise sap 15 SP7
6.4.0-150700.20.27.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.27.1
fixed
kernel-syms
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
kernel-syms-azure
suse enterprise sap 15 SP7
6.4.0-150700.20.27.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.20.27.1
fixed
kernel-zfcpdump
suse enterprise desktop 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise sap 15 SP7
6.4.0-150700.53.31.1
fixed
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
suse enterprise server 15 SP7
6.4.0-150700.53.31.1
fixed
ocfs2-kmp-default
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
reiserfs-kmp-default
suse enterprise server 15 SP6
6.4.0-150600.23.87.1
fixed
References
https://git.kernel.org/stable/c/24a2062257bbdfc831de5ed21c27b04b5bdf2437
https://git.kernel.org/stable/c/27037916db38e6b78a0242031d3b93d997b84020
https://git.kernel.org/stable/c/393b8f9bedc7806acb9c47cefdbdb223b4b6164b
https://git.kernel.org/stable/c/4701493ba37654b3c38b526f6591cf0b02aa172f
https://git.kernel.org/stable/c/8dc1f5a85286290dbf04dd5951d020570f49779b
https://git.kernel.org/stable/c/944edca81e7aea15f83cf9a13a6ab67f711e8abd
https://git.kernel.org/stable/c/e1da6e399df976dd04c7c73ec008bc81da368a95