CVE-2025-68194

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

media: imon: make send_packet() more robust

syzbot is reporting that imon has three problems which result in

hung tasks due to forever holding device lock [1].

First problem is that when usb_rx_callback_intf0() once got -EPROTO error

after ictx->dev_present_intf0 became true, usb_rx_callback_intf0()

resubmits urb after printk(), and resubmitted urb causes

usb_rx_callback_intf0() to again get -EPROTO error. This results in

printk() flooding (RCU stalls).

Alan Stern commented [2] that

In theory it's okay to resubmit _if_ the driver has a robust

error-recovery scheme (such as giving up after some fixed limit on the

number of errors or after some fixed time has elapsed, perhaps with a

time delay to prevent a flood of errors). Most drivers don't bother to

do this; they simply give up right away. This makes them more

vulnerable to short-term noise interference during USB transfers, but in

reality such in

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References