CVE-2025-68324

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel related to the SCSI subsystem and the IMM (Integrated Microcode Module) parallel port SCSI host adapter. The problem occurs because a delayed work item, imm tq, may still be pending or executing when the IMM device is detached via imm detach(). This can lead to the imm interrupt() function accessing memory that has already been freed, resulting in a use-after-free condition. The race condition happens when the imm struct device instance is deallocated while the delayed work is still in progress.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.