PT-2025-51711 · Linux+3 · Linux Kernel+3

CVE-2025-68307

·

Published

2025-11-16

·

Updated

2026-08-30

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The CAN driver within the Linux kernel contains an issue in the gs usb xmit callback() function related to the handling of failed transmitted URBs. The driver does not properly clean up after failed URB transfers, leading to a reduction in available URBs with each error. This can result in decreased performance and eventually a complete halt in transmission. Proper cleanup involves increasing network device statistics, marking the echo sbk as free, freeing the driver's context, performing accounting, and waking the send queue.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Release of Resource after Effective Lifetime

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

AZL-72619
BDU:2026-09420
CVE-2025-68307
ECHO-5309-C143-9206
MGASA-2026-0017
MGASA-2026-0018
OPENSUSE-SU-2026:20145-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20207-1
SUSE-SU-2026:20220-1
SUSE-SU-2026:20228-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20564-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
USN-8094-1
USN-8094-2
USN-8094-3
USN-8094-4
USN-8094-5
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8152-1
USN-8165-1
USN-8261-1
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8597-1
USN-8610-1
USN-8620-1
USN-8620-2
USN-8620-3
USN-8620-4
USN-8668-1

Affected Products

Debian
Linuxmint
Linux Kernel
Ubuntu