CVE-2025-68323

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a use-after-free issue within the USB Type-C Universal Serial Bus Implementers Forum (UCSi) component. Specifically, a delayed work item (uec->work) was scheduled but not properly canceled during module removal, leading to potential access of freed memory. The race window for this issue was approximately 3 seconds, making it easily reproducible. The issue manifested as a slab-use-after-free condition, detected by KASAN, involving the run timers function and structures related to the UCSi and gaokun ucsi components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.