Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68249

In the Linux kernel, the following vulnerability has been resolved: most: usb: hdm_probe: Fix calling put_device() before device initialization The early error path in hdm_probe() can jump to err_free_mdev before &mdev->dev has been initialized with device_initialize(). Calling put_device(&mdev->dev) there triggers a device core WARN and ends up invoking kref_put(&kobj->kref, kobject_release) on an uninitialized kobject. In this path the private struct was only kmalloc'ed and the intended rel
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:9e5f7c8a9cbde10538e106103ea39f7a2acebdeb91bdbdca1fcbdb4eb0045cd0
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/most/most_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.246","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.196","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.158","versionType":"semver"},{"lessTha…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/most/most_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3509c748e79435d09e730673c8c100b7f0ebc87c","status":"affected","version":"97a6f772f36b7f52bcfa56a581bbd2470cffe23d","versionType":"git"},{"lessThan":"ad2be44882716dc3589fbc5572cc13f88ead6b24","status":"affected","version":"97a6f772f36b7f52bcfa56a581bbd2470cffe23d","versionType":"git"},{"lessThan":"c400410fe0580dd6118ae8d60287ac9ce71a65fd","status":"affected","version":"97a6f772f36b7f52bcfa56…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/most/most_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.9"},{"lessThan":"5.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.246","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.196","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.158","versionType":"semver"},{"lessTha…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/most/most_usb.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"3509c748e79435d09e730673c8c100b7f0ebc87c","status":"affected","version":"97a6f772f36b7f52bcfa56a581bbd2470cffe23d","versionType":"git"},{"lessThan":"ad2be44882716dc3589fbc5572cc13f88ead6b24","status":"affected","version":"97a6f772f36b7f52bcfa56a581bbd2470cffe23d","versionType":"git"},{"lessThan":"c400410fe0580dd6118ae8d60287ac9ce71a65fd","status":"affected","version":"97a6f772f36b7f52bcfa56…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/3509c748e79435d09e730673c8c100b7f0ebc87c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/4af0eedbdb4df7936bf43a28e31af232744d2620"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/6fb8fbc0aa542af5bf0fed94fa6b0edf18144f95"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/7d851f746067b8ee5bac9c262f326ace0a6ea253"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/a8cc9e5fcb0e2eef21513a4fec888f5712cb8162"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/ad2be44882716dc3589fbc5572cc13f88ead6b24"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/c400410fe0580dd6118ae8d60287ac9ce71a65fd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:27194a295b3df4d3a26172e28010d8f64a23e4c29bff878ed9875ad1d5c57bea · sha256:d063ff340d7b8ec3… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer