CVE-2025-68332

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

comedi: c6xdigio: Fix invalid PNP driver unregistration

The Comedi low-level driver "c6xdigio" seems to be for a parallel port

connected device. When the Comedi core calls the driver's Comedi

"attach" handler `c6xdigio_attach()` to configure a Comedi to use this

driver, it tries to enable the parallel port PNP resources by

registering a PNP driver with `pnp_register_driver()`, but ignores the

return value. (The `struct pnp_driver` it uses has only the `name` and

`id_table` members filled in.) The driver's Comedi "detach" handler

`c6xdigio_detach()` unconditionally unregisters the PNP driver with

`pnp_unregister_driver()`.

It is possible for `c6xdigio_attach()` to return an error before it

calls `pnp_register_driver()` and it is possible for the call to

`pnp_register_driver()` to return an error (that is ignored). In both

cases, the driver should not be calling `pnp_unregister_driver()` as it

does in `c6xdigio_de

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References