CVE-2025-68289

Linux Kernel Memory Leak in EEM Unwrap Function

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_eem: Fix memory leak in eem_unwrap The existing code did not handle the failure case of usb_ep_queue in the command path, potentially leading to memory leaks. Improve error handling to free all allocated resources on usb_ep_queue failure. This patch continues to use goto logic for error handling, as the existing error handling is complex and not easily adaptable to auto-cleanup helpers. kmemleak results: unreferenced object 0xffffff895a512300 (size 240): backtrace: slab_post_alloc_hook+0xbc/0x3a4 kmem_cache_alloc+0x1b4/0x358 skb_clone+0x90/0xd8 eem_unwrap+0x1cc/0x36c unreferenced object 0xffffff8a157f4000 (size 256): backtrace: slab_post_alloc_hook+0xbc/0x3a4 __kmem_cache_alloc_node+0x1b4/0x2dc kmalloc_trace+0x48/0x140 dwc3_gadget_ep_alloc_request+0x58/0x11c usb_ep_alloc_request+0x40/0xe4 eem_unwrap+0x204/0x36c unreferenced object 0xffffff8aadbaac00 (size 128): backtrace: slab_post_alloc_hook+0xbc/0x3a4 __kmem_cache_alloc_node+0x1b4/0x2dc __kmalloc+0x64/0x1a8 eem_unwrap+0x218/0x36c unreferenced object 0xffffff89ccef3500 (size 64): backtrace: slab_post_alloc_hook+0xbc/0x3a4 __kmem_cache_alloc_node+0x1b4/0x2dc kmalloc_trace+0x48/0x140 eem_unwrap+0x238/0x36c

Scores

EPSS 0.0008
EPSS Percentile 22.5%

Details

Status published
Products (37)
linux/Kernel < 5.10.247linux
linux/Kernel 5.11.0 - 5.15.197linux
linux/Kernel 5.14.0 - 6.1.159linux
linux/Kernel 5.16.0 - 6.6.119linux
linux/Kernel 6.2.0 - 6.12.61linux
linux/Kernel 6.7.0 - 6.17.11linux
Linux/Linux < 5.14
Linux/Linux 3680a6ff9a9ccd3c664663da04bef2534397d591
Linux/Linux 3b545788505b2e2883aff13bdddeacaf88942a4f - a9985a88b2fc29fbe1657fe8518908e261d6889c
Linux/Linux 4.14.240 - 4.15
... and 27 more
Published Dec 16, 2025
Tracked Since Feb 18, 2026