CVE Explorer

CVE-2025-68282

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: udc: fix use-after-free in usb_gadget_state_work A race condition during gadget teardown can lead to a use-after-free in usb_gadget_state_work(), as reported by KASAN: BUG: KASAN: invalid-access in sysfs_notify+0x2c/0xd0 Workqueue: events usb_gadget_state_work The fundamental race occurs because a concurrent event (e.g., an interrupt) can call usb_gadget_set_state() and schedule gadget->work at any time duri

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:665065be08e5dd86358c1a253018dfb20ff1f790b01146d8f993035b094012aa

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/gadget/udc/core.c","include/linux/usb/gadget.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"dddc944d65169b552e09cb54e3ed4fbb9ea26416","status":"affected","version":"5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15","versionType":"git"},{"lessThan":"eee16f3ff08e759ea828bdf7dc1c0ef2f22134f5","status":"affected","version":"5702f75375aa9ecf8ad3431aef3fe6ce8c8dbd15","versionType":"git"},{"lessThan":"c12a0c3ef815ddd67e47f9c819f9fe822fed5467","status":"affected…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/gadget/udc/core.c","include/linux/usb/gadget.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.12"},{"lessThan":"3.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.1…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/affected/1

Source references

7 source assertions

{"url":"https://git.kernel.org/stable/c/10014310193cf6736c1aeb4105c5f4a0818d0c65"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/3b32caa73d135eea8fb9cabb45e9fc64c5a3ecb9"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/baeb66fbd4201d1c4325074e78b1f557dff89b5b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/c12a0c3ef815ddd67e47f9c819f9fe822fed5467"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/dddc944d65169b552e09cb54e3ed4fbb9ea26416"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/eee16f3ff08e759ea828bdf7dc1c0ef2f22134f5"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/f02a412c0a18f02f0f91b0a3d9788315a721b7fd"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:4d362d1c4af0e68542cf982d76cd766965e438212175a2881e5c721c75098df3 · sha256:d04b117e1af8cbcb… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer