https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T19:46:36.033024+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-68804 CVE-2025-68804 — platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver 2026-10-01T19:46:36.034795+00:00

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver

After unbinding the driver, another kthread `cros_ec_console_log_work` is still accessing the device, resulting an UAF and crash.

The driver doesn't unregister the EC device in .remove() which should shutdown sub-devices synchronously. Fix it.