CVE-2025-68289

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the f eem module within the gadget subsystem, specifically in the eem unwrap function. The existing code lacked proper error handling for usb ep queue failures in the command path, leading to unreleased memory. The fix improves error handling to free allocated resources when usb ep queue fails. The issue resulted in unreferenced objects during kmemleak analysis, with backtraces indicating allocations within eem unwrap, dwc3 gadget ep alloc request, and related functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.