Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/01/13 3:29 p.m.32 views

CVE-2025-68804 platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosecishtp: Fix UAF after unbinding driver After unbinding the driver, another kthread crosecconsolelogwork is still accessing the device, resulting an UAF and crash. The driver doesn't unregister the EC device ...

0.00173EPSS
SaveExploits0References7
CVE
CVE
added 2026/01/13 3:29 p.m.21 views

CVE-2025-68804

CVE-2025-68804 relates to the Linux kernel component platform/chrome: cros_ec_ishtp, where a UAF occurs after a driver is unbound because the EC device isn’t unregistered in the driver’s .remove(), leaving a kthread (cros_ec_console_log_work) that may access the device. Effect: crash due to use-a...

6.2AI score0.00173EPSS
SaveExploits0References7
Rows per page
Query Builder