CVE-2025-68734: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
In the Linux kernel, the following vulnerability has been resolved:
isdn: mISDN: hfcsusb: fix memory leak in hfcsusbprobe()
In hfcsusbprobe(), the memory allocated for ctrlurb gets leaked when setupinstance() fails with an error code. Fix that by freeing the urb before freeing the hw structure. Also change the error paths to use the goto ladder style.
Compile tested only. Issue found using a prototype static analysis tool.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In hfcsusb_probe(), free ctrl_urb on all error paths when setup_instance() fails, before freeing the hw structure.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68734?
CVE-2025-68734 has been classified with a low severity due to its nature of causing a memory leak without a direct exploitability concern.
How do I fix CVE-2025-68734?
To fix CVE-2025-68734, ensure that you update to the patched version of the Linux kernel that addresses the memory leak in hfcsusb_probe().
What software is affected by CVE-2025-68734?
CVE-2025-68734 affects the Linux kernel specifically in the ISDN subsystem related to the hfcsusb driver.
Can CVE-2025-68734 be exploited remotely?
CVE-2025-68734 does not present a remote exploitation risk as it involves a local memory leak during probe functions.
Is there a known exploit for CVE-2025-68734?
As of now, there are no known exploits for CVE-2025-68734 since it primarily causes a memory leak without a direct way to be exploited.