CVE-2025-68734
isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()
Reported by linux · Published December 24, 2025
In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before freeing the hw structure. Also change the error paths to use the goto ladder style. Compile tested only. Issue found using a prototype static analysis tool.
EPSS 0.20% · 9.4th percentile
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| linux_kernel | linux | 6.18, 6.17.9, 6.12.59, 6.6.117, 6.1.159, 5.15.197, 5.10.247, 5.4.302 |
| Linux | Linux | ea7936304ed74ab7f965d17f942a173ce91a5ca8, b70c24827e11fdc71465f9207e974526fb457bb9, adb7577e23a431fc53aa1b6107733c0d751015fb, 6dce43433e0635e7b00346bc937b69ce48ea71bb, 475032fa2bb82ffb592c321885e917e39f47357f, 3f978e3f1570155a1327ffa25f60968bc7b9398f, 3f7c72bc73c4e542fde14cce017549d8a0b61a3c, 2.6.29, 03695541b3349bc40bf5d6563d44d6147fb20260 |
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | 69f52adb2d534afc41fcc658f155e01f0b322f9e, 69f52adb2d534afc41fcc658f155e01f0b322f9e, 69f52adb2d534afc41fcc658f155e01f0b322f9e |
| Linux | Linux | 2.6.29, 0, 5.4.302 |
| linux | linux_kernel | 2.6.29, 2.6.29, 2.6.29 |
| Linux | Linux | 69f52adb2d534afc41fcc658f155e01f0b322f9e, 69f52adb2d534afc41fcc658f155e01f0b322f9e, 69f52adb2d534afc41fcc658f155e01f0b322f9e |
Timeline
- Dec 24, 2025 CVE Published
- Dec 28, 2025 EPSS Score (29 in total, the first dated here)
- Mar 26, 2026 Coalition ESS Score (2 in total, the first dated here)
- Mar 29, 2026 Distribution Patch (177 in total, the first dated here)
- Mar 29, 2026 Security Advisory (183 in total, the first dated here)
- Jun 17, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-68734
vulnetix vdb fixes CVE-2025-68734Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-68734/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart