CVE-2025-68754: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: rtc: amlogic-a4: fix double free caused by devm The clock obtained via devm_clk_get_enabled() is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clk_disable_unprepare() in error path and remove function causes double free. Remove the redundant clk_disable_unprepare() calls from the probe error path and aml_rtc_remove(), allowing the devm framework to automatically manage the clock lifecycle.

Засегнати продукти

• Linux Linux: c89ac9182ee297597f1c6971045382bae19c3f9d преди 9fed02c16488050cd4e33e045506336b216d7301; c89ac9182ee297597f1c6971045382bae19c3f9d преди 2e1c79299036614ac32b251d145fad5391f4bcab; c89ac9182ee297597f1c6971045382bae19c3f9d преди 384150d7a5b60c1086790a8ee07b0629f906cca2
• Linux Linux: 6.13; преди 6.13; 6.17.13 до 6.17.*; 6.18.2 до 6.18.*; от 6.19 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2025-68754
• https://nvd.nist.gov/vuln/detail/CVE-2025-68754
• https://git.kernel.org/stable/c/9fed02c16488050cd4e33e045506336b216d7301
• https://git.kernel.org/stable/c/2e1c79299036614ac32b251d145fad5391f4bcab
• https://git.kernel.org/stable/c/384150d7a5b60c1086790a8ee07b0629f906cca2