CVE Database›CVE-2025-68804

CVE-2025-68804

kernel: platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · January 13, 2026

Updated · June 28, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

After unbinding the driver, another kthread cros_ec_console_log_work is still accessing the device, resulting an UAF and crash.

The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified