CVE-2025-68739
Use-After-Free Vulnerability in Linux Kernel devfreq OPP Handling
Publication date: 2025-12-24
Last updated on: 2025-12-24
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential Use-After-Free (UAF) issue in the Linux kernel's PM / devfreq subsystem, specifically in the hisi driver related to Operating Performance Points (OPP) handling. The fix ensures that all required data is acquired before calling dev_pm_opp_put(opp) to maintain the correct order of resource acquisition and release, preventing the UAF condition.
How can this vulnerability impact me? :
A Use-After-Free vulnerability can lead to undefined behavior such as system crashes, data corruption, or potential escalation of privileges if exploited. In this case, it could affect the stability and security of systems running the affected Linux kernel, potentially allowing attackers to cause denial of service or execute arbitrary code.