CVE-2025-68282

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists during gadget teardown that can lead to a use-after-free in the usb gadget state work() function. This occurs because a concurrent event can call usb gadget set state() and schedule gadget->work at any time during the cleanup process in usb del gadget(). A previous attempt to fix this issue did not fully resolve the race condition. The issue is addressed by introducing a 'teardown' flag and a 'state lock' spinlock to the usb gadget struct, preventing new work from being scheduled once cleanup has commenced.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.