CVE-2025-68307

kernel: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs

Loading…

Severity

Important

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 16, 2025

Updated · June 30, 2026

Description

A resource leak was found in the gs_usb CAN driver in the Linux kernel. When USB bulk URB transmission fails, the driver does not perform proper cleanup, leaving URBs in an allocated state. Repeated failures progressively reduce available URBs until transmission stops completely.

Statement

This affects systems using Geschwister Schneider USB/CAN adapters. The issue causes gradual performance degradation leading to complete transmission failure, impacting CAN bus communications.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the gs_usb module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-772 · Missing Release of Resource after Effective Lifetime