news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2025-68307

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
5.5 Medium
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0.19%
Risk score
4.7
Published
2025-12-16
Status
Published

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs The driver lacks the cleanup of failed transfers of URBs. This reduces the number of available URBs per error by 1. This leads to reduced performance and ultimately to a complete stop of the transmission. If the sending of a bulk URB fails do proper cleanup: - increase netdev stats - mark the echo_sbk as free - free the driver's context and do accounting - wake the send queue A resource leak was found in the gs_usb CAN driver in the Linux kernel. When USB bulk URB transmission fails, the driver does not perform proper cleanup, leaving URBs in an allocated state. Repeated failures progressively reduce available URBs until transmission stops completely.

Weaknesses

CWE-772

Coverage 4

Advisories and references