CVE-2025-68734
In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before freeing the hw structure. Also change the error paths to use the goto ladder style. Compile tested only. Issue found using a prototype static analysis tool.
Affected versions
Linux kernel versions
2.6.29
and later are affected. Fixed in
5.4.302,
5.10.247,
5.15.197,
6.1.159,
6.6.117,
6.12.59,
6.17.9,
6.18
and their respective stable series.
References
The following references provide additional information about CVE-2025-68734 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/03695541b3349bc40bf5d6563d44d6147fb20260
-
PatchKernel patch commithttps://git.kernel.org/stable/c/3f7c72bc73c4e542fde14cce017549d8a0b61a3c
-
PatchKernel patch commithttps://git.kernel.org/stable/c/3f978e3f1570155a1327ffa25f60968bc7b9398f
Frequently asked questions
-
What is CVE-2025-68734?
CVE-2025-68734 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 2.6.29 onward and has been patched in 5.4.302, 5.10.247, 5.15.197 and others. CVE-2025-68734 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2025-68734?
Yes — CVE-2025-68734 has been patched. Fixed versions include 5.4.302, 5.10.247, 5.15.197 and others. If you are running Linux kernel 2.6.29 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2025-68734 actively exploited?
No — CVE-2025-68734 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.