CVE-2025-68804: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

Published Jan 13, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: crosecishtp: Fix UAF after unbinding driver

After unbinding the driver, another kthread crosecconsolelogwork is still accessing the device, resulting an UAF and crash.

The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.

Affected Software

2 affected componentsFixes available

Linux Foundation Linux kernel (cros_ec_ishtp driver)

debian/linux

6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Configuration
Update .remove() to unregister the EC device so its sub-devices, including cros_ec_console_log_work, are shut down synchronously before driver unbinding completes.
platform/chrome cros_ec_ishtp driver .remove() = unregister the EC device

Event History

Jan 13, 2026

CVE Published

via MITRE·03:29 PM

Data Sourced

via MITRE·03:29 PM

Description

Data Sourced

via NVD·04:16 PM

Description

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2025-68804?

CVE-2025-68804 has a risk severity score of 28.

What does CVE-2025-68804 affect?

CVE-2025-68804 affects the cros_ec_ishtp driver in the Linux kernel.

How do I fix CVE-2025-68804?

To fix CVE-2025-68804, ensure you update to the patched version of the Linux kernel that addresses this UAF issue.

What is the impact of CVE-2025-68804?

The impact of CVE-2025-68804 includes potential crashes due to use-after-free (UAF) when accessing a device after unbinding the driver.

When was CVE-2025-68804 published?

CVE-2025-68804 was published on January 13, 2026.