BaseFortify

Publication date: 2026-01-13

Last updated on: 2026-01-19

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding the driver, another kthread `cros_ec_console_log_work` is still accessing the device, resulting an UAF and crash. The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-13

Last Modified

2026-01-19

Generated

2026-07-06

AI Q&A

2026-01-14

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68804

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a Use-After-Free (UAF) issue in the Linux kernel's cros_ec_ishtp driver. After the driver is unbound, a kernel thread named cros_ec_console_log_work continues to access the device, which has already been freed, leading to a UAF condition and potential system crash. The root cause is that the driver does not unregister the EC device properly during its removal, failing to shut down sub-devices synchronously.

Impact Analysis

The vulnerability can cause system instability or crashes due to the Use-After-Free condition when the driver accesses freed memory. This can lead to denial of service or potentially other unpredictable behavior in systems using the affected Linux kernel driver.

Hi! I’m here to help you understand CVE-2025-68804. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70