CVE-2025-68804: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

Published Jan 13, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: crosecishtp: Fix UAF after unbinding driver

After unbinding the driver, another kthread crosecconsolelogwork is still accessing the device, resulting an UAF and crash.

The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.

Affected Software

1 affected component

Linux Foundation Linux kernel (cros_ec_ishtp driver)

Jan 13, 2026

CVE Published

via MITRE·03:29 PM

Data Sourced

via MITRE·03:29 PM

Description

Data Sourced

via NVD·04:16 PM

Description

CVE-2025-68804 has a risk severity score of 28.

CVE-2025-68804 affects the cros_ec_ishtp driver in the Linux kernel.

To fix CVE-2025-68804, ensure you update to the patched version of the Linux kernel that addresses this UAF issue.

The impact of CVE-2025-68804 includes potential crashes due to use-after-free (UAF) when accessing a device after unbinding the driver.

CVE-2025-68804 was published on January 13, 2026.