CVE-2025-68289

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_eem: Fix memory leak in eem_unwrap

The existing code did not handle the failure case of usb_ep_queue in the

command path, potentially leading to memory leaks.

Improve error handling to free all allocated resources on usb_ep_queue

failure. This patch continues to use goto logic for error handling, as the

existing error handling is complex and not easily adaptable to auto-cleanup

helpers.

kmemleak results:

unreferenced object 0xffffff895a512300 (size 240):

backtrace:

slab_post_alloc_hook+0xbc/0x3a4

kmem_cache_alloc+0x1b4/0x358

skb_clone+0x90/0xd8

eem_unwrap+0x1cc/0x36c

unreferenced object 0xffffff8a157f4000 (size 256):

backtrace:

slab_post_alloc_hook+0xbc/0x3a4

__kmem_cache_alloc_node+0x1b4/0x2dc

kmalloc_trace+0x48/0x140

dwc3_gadget_ep_alloc_request+0x58/0x11c

usb_ep_alloc_request+0x40/0xe4

eem_unwrap+0x204/0x36c

unreferenced obj

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References