Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68287

In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths This patch addresses a race condition caused by unsynchronized execution of multiple call paths invoking `dwc3_remove_requests()`, leading to premature freeing of USB requests and subsequent crashes. Three distinct execution paths interact with `dwc3_remove_requests()`: Path 1: Triggered via `dwc3_gadget_reset_interrupt()` during USB reset hand
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d246c30c91ef5eec74887cb6a4239ef3dd022083328d63d47c2e20054397ede1
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/dwc3/ep0.c","drivers/usb/dwc3/gadget.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.159","versi…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/dwc3/ep0.c","drivers/usb/dwc3/gadget.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"467add9db13219101f14b6cc5477998b4aaa5fe2","status":"affected","version":"72246da40f3719af3bfd104a2365b32537c27d83","versionType":"git"},{"lessThan":"67192e8cb7f941b5bba91e4bb290683576ce1607","status":"affected","version":"72246da40f3719af3bfd104a2365b32537c27d83","versionType":"git"},{"lessThan":"47de14d741cc4057046c9e2f33df1f7828254e6c","status":"affected","versi…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/usb/dwc3/ep0.c","drivers/usb/dwc3/gadget.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.2"},{"lessThan":"3.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.247","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.197","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.159","versi…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/usb/dwc3/ep0.c","drivers/usb/dwc3/gadget.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"467add9db13219101f14b6cc5477998b4aaa5fe2","status":"affected","version":"72246da40f3719af3bfd104a2365b32537c27d83","versionType":"git"},{"lessThan":"67192e8cb7f941b5bba91e4bb290683576ce1607","status":"affected","version":"72246da40f3719af3bfd104a2365b32537c27d83","versionType":"git"},{"lessThan":"47de14d741cc4057046c9e2f33df1f7828254e6c","status":"affected","versi…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/467add9db13219101f14b6cc5477998b4aaa5fe2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/47de14d741cc4057046c9e2f33df1f7828254e6c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/67192e8cb7f941b5bba91e4bb290683576ce1607"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7cfb62888eba292fa35cd9ddbd28ce595f60e139"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/afc0e34f161ce61ad351303c46eb57bd44b8b090"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/e4037689a366743c4233966f0e74bc455820d316"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/fa5eaf701e576880070b60922200557ae4aa54e1"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2c75fbc1d1feda9089ef2306c9e42e610196fd38af2d77f7aefea12a5cc74a13 · sha256:3d3065f51b7fbb2f… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer