What’s Vulnerable › Vulnerabilities

CVE-2025-68734: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-24 · updated 2026-10-13

Description

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before freeing the hw structure. Also change the error paths to use the goto ladder style. Compile tested only. Issue found using a prototype static analysis tool.

Affected products

• Linux kernel: 2.6.29 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/03695541b3349bc40bf5d6563d44d6147fb20260
• https://git.kernel.org/stable/c/3f7c72bc73c4e542fde14cce017549d8a0b61a3c
• https://git.kernel.org/stable/c/3f978e3f1570155a1327ffa25f60968bc7b9398f
• https://git.kernel.org/stable/c/475032fa2bb82ffb592c321885e917e39f47357f
• https://git.kernel.org/stable/c/6dce43433e0635e7b00346bc937b69ce48ea71bb
• https://git.kernel.org/stable/c/adb7577e23a431fc53aa1b6107733c0d751015fb
• https://git.kernel.org/stable/c/b70c24827e11fdc71465f9207e974526fb457bb9
• https://git.kernel.org/stable/c/ea7936304ed74ab7f965d17f942a173ce91a5ca8

Get alerted when CVE-2025-68734 or the next vulnerability affects your stack