Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68804

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver After unbinding the driver, another kthread `cros_ec_console_log_work` is still accessing the device, resulting an UAF and crash. The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:f27495c12a36cb856a510bb8aa7b96396c407c4d49f8789d2dace4d2912178bd
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/platform/chrome/cros_ec_ishtp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"se…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/platform/chrome/cros_ec_ishtp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"27037916db38e6b78a0242031d3b93d997b84020","status":"affected","version":"26a14267aff218c60b89007fdb44ca392ba6122c","versionType":"git"},{"lessThan":"e1da6e399df976dd04c7c73ec008bc81da368a95","status":"affected","version":"26a14267aff218c60b89007fdb44ca392ba6122c","versionType":"git"},{"lessThan":"8dc1f5a85286290dbf04dd5951d020570f49779b","status":"affected","version":"26a142…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/platform/chrome/cros_ec_ishtp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.3"},{"lessThan":"5.3","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.248","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.198","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.160","versionType":"se…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/platform/chrome/cros_ec_ishtp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"27037916db38e6b78a0242031d3b93d997b84020","status":"affected","version":"26a14267aff218c60b89007fdb44ca392ba6122c","versionType":"git"},{"lessThan":"e1da6e399df976dd04c7c73ec008bc81da368a95","status":"affected","version":"26a14267aff218c60b89007fdb44ca392ba6122c","versionType":"git"},{"lessThan":"8dc1f5a85286290dbf04dd5951d020570f49779b","status":"affected","version":"26a142…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/affected/0

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/24a2062257bbdfc831de5ed21c27b04b5bdf2437"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/27037916db38e6b78a0242031d3b93d997b84020"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/393b8f9bedc7806acb9c47cefdbdb223b4b6164b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/4701493ba37654b3c38b526f6591cf0b02aa172f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/8dc1f5a85286290dbf04dd5951d020570f49779b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/944edca81e7aea15f83cf9a13a6ab67f711e8abd"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/e1da6e399df976dd04c7c73ec008bc81da368a95"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:a15d409890c05bc7e7daea054ddc85d816a5410692e3b4394639df53ab02283c · sha256:d4d8b2b2d5c15ca4… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer