CVE-2025-68312

NONECVSS 0.0

0.0

In the Linux kernel, the following vulnerability has been resolved:

usbnet: Prevents free active kevent

The root cause of this issue are:

When probing the usbnet device, executing usbnet_link_change(dev, 0, 0);

put the kevent work in global workqueue. However, the kevent has not yet been scheduled when the usbnet device is unregistered. Therefore, executing free_netdev() results in the "free active object (kevent)" error reported here.

Another factor is that when calling usbnet_disconnect()->unregister_netdev(),

if the usbnet device is up, ndo_stop() is executed to cancel the kevent. However, because the device is not up, ndo_stop() is not executed.

The solution to this problem is to cancel the kevent before executing free_netdev().

CVSS v3: —
EG Score: 0.0(none)
EPSS: 12.6%
KEV: Not listed

Published

December 16, 2025

Last Modified

April 15, 2026

References (8)

416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/285d4b953f2ca03c358f986718dd89ee9bde632e
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2ce1de32e05445d77fc056f6ff8339cfb78a5f84
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3a10619fdefd3051aeb14860e4d4335529b4e94d
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/420c84c330d1688b8c764479e5738bbdbf0a33de
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/43005002b60ef3424719ecda16d124714b45da3b
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/5158fb8da162e3982940f30cd01ed77bdf42c6fc
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/88a38b135d69f5db9024ff6527232f1b51be8915
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9a579d6a39513069d298eee70770bbac8a148565

Patch Availability(26)

Vendor / Ecosystem	Fixed in / Patch	Released	Source
ubuntu	linux-tools-oem-6.17 (6.17.0-1011.11) @ noble	2026-05-21	ubuntu
ubuntu	linux-virtual-hwe-24.04-edge (6.17.0-14.14) @ questing	2026-05-21	ubuntu
ubuntu	linux-tools-gcp-64k-6.17 (6.17.0-1007.7) @ questing	2026-05-21	ubuntu
ubuntu	linux-tools-oracle-64k-6.17 (6.17.0-1007.7) @ questing	2026-05-21	ubuntu
ubuntu	linux-tools-azure-6.17 (6.17.0-1008.8) @ questing	2026-05-21	ubuntu
ubuntu	linux-virtual-6.8 (6.8.0-106.106) @ noble	2026-05-21	ubuntu
ubuntu	linux-xilinx-zynqmp-tools-5.15.0-1067 (5.15.0-1067.71) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-nvidia-lowlatency-64k-6.8 (6.8.0-1049.52.1) @ noble	2026-05-21	ubuntu
ubuntu	linux-tools-gcp-fips-6.8 (6.8.0-1052.55+fips1) @ noble	2026-05-21	ubuntu
ubuntu	linux-tools-gcp-fips-5.15 (5.15.0.1103.93) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-gke-5.15 (5.15.0.1099.98) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-realtime-5.15 (5.15.0.1102.106) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-intel-iot-realtime-5.15 (5.15.0.1094.98) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-nvidia-tegra-igx-rt-5.15 (5.15.0.1044.46) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-azure-lts-24.04 (6.8.0-1051.57) @ noble	2026-05-21	ubuntu
ubuntu	linux-tools-realtime-6.8.1 (6.8.1-1045.46) @ noble	2026-05-21	ubuntu
ubuntu	linux-tools-aws-edge (6.8.0-1050.53~22.04.1) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-azure-edge (6.8.0-1051.57~22.04.1) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-raspi-realtime-6.8 (6.8.0-2040.41) @ noble	2026-05-21	ubuntu
ubuntu	linux-tools-azure-edge (5.15.0.1110.119~20.04.1) @ focal	2026-05-21	ubuntu
ubuntu	linux-tools-raspi-nolpae (5.15.0.1097.95) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-azure-fips-6.8 (6.8.0-1052.58+fips1) @ noble	2026-05-21	ubuntu
ubuntu	linux-tools-azure-fips-5.15 (5.15.0.1109.94) @ jammy	2026-05-21	ubuntu
ubuntu	linux-tools-azure-lts-22.04 (5.15.0.1109.107) @ jammy	2026-05-21	ubuntu
ubuntu	linux-xilinx-zynqmp (6.8.0.1029.30) @ noble	2026-05-21	ubuntu
linux	Kernel @ 5.4.302	—	osv

Patches are aggregated from vendor advisories (Red Hat, Microsoft, Cisco, GitHub) and package ecosystems (OSV, GHSA). Multiple rows for the same upstream release have been deduplicated.

All Vendor Advisories

(25)

Every vendor that published an advisory referencing this CVE — pulled from our cve_vendor_advisories aggregation. Click any row for the vendor's original advisory page.

Data Freshness Timeline

(refreshed 11× in last 7d / 55× in last 30d)

Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.

2026-06-12 23:12 UTCEPSS rescore
2026-06-12 23:12 UTCEPSS rescore
2026-06-11 14:00 UTCEPSS rescore
2026-06-10 22:18 UTCEPSS rescore
2026-06-10 13:22 UTCEPSS rescore
2026-06-08 14:17 UTCEPSS rescore
2026-06-08 14:17 UTCEPSS rescore
2026-06-07 15:24 UTCEPSS rescore
2026-06-07 15:24 UTCEPSS rescore
2026-06-06 13:47 UTCEPSS rescore
2026-06-06 13:47 UTCEPSS rescore
2026-06-05 22:47 UTCEPSS rescore
2026-06-05 22:46 UTCEPSS rescore
2026-06-05 06:10 UTCEPSS rescore
2026-06-05 06:10 UTCEPSS rescore
2026-06-04 13:12 UTCEPSS rescore
2026-06-04 13:12 UTCEPSS rescore
2026-06-02 20:13 UTCEPSS rescore
2026-06-02 20:12 UTCEPSS rescore
2026-06-02 00:09 UTCOSV refresh
2026-06-01 13:51 UTCEPSS rescore
2026-06-01 13:51 UTCEPSS rescore
2026-05-31 22:30 UTCEPSS rescore
2026-05-31 22:30 UTCEPSS rescore
2026-05-31 00:16 UTCEPSS rescore

Show 30 more

2026-05-31 00:16 UTCEPSS rescore
2026-05-29 13:44 UTCEPSS rescore
2026-05-28 13:44 UTCEPSS rescore
2026-05-28 13:44 UTCEPSS rescore
2026-05-28 13:44 UTCEPSS rescore
2026-05-27 13:40 UTCEPSS rescore
2026-05-27 13:40 UTCEPSS rescore
2026-05-27 13:40 UTCEPSS rescore
2026-05-27 13:40 UTCEPSS rescore
2026-05-26 13:44 UTCEPSS rescore
2026-05-26 13:44 UTCEPSS rescore
2026-05-26 13:43 UTCEPSS rescore
2026-05-26 07:18 UTCEPSS rescore
2026-05-26 07:18 UTCEPSS rescore
2026-05-26 07:18 UTCEPSS rescore
2026-05-23 15:21 UTCEPSS rescore
2026-05-22 21:16 UTCEPSS rescore
2026-05-22 21:16 UTCEPSS rescore
2026-05-21 22:43 UTCEPSS rescore
2026-05-21 02:48 UTCEG score recompute
2026-05-21 02:48 UTCVendor advisory
2026-05-21 02:48 UTCGHSA enrichment
2026-05-20 22:37 UTCEPSS rescore
2026-05-20 22:37 UTCEPSS rescore
2026-05-20 22:37 UTCEPSS rescore
2026-05-20 22:37 UTCEPSS rescore
2026-05-20 11:21 UTCEPSS rescore
2026-05-20 11:21 UTCEPSS rescore
2026-05-20 11:21 UTCEPSS rescore
2026-05-20 11:21 UTCEPSS rescore

Frequently asked(4)

What is CVE-2025-68312?

CVE-2025-68312 is a none vulnerability published on December 16, 2025. In the Linux kernel, the following vulnerability has been resolved: usbnet: Prevents free active kevent The root cause of this issue are: 1. When probing the usbnet device, executing usbnetlinkchange(dev, 0, 0); put the kevent work in global workqueue. However, the kevent has not yet been scheduled…

When was CVE-2025-68312 disclosed?

CVE-2025-68312 was first published in the National Vulnerability Database on December 16, 2025, with the most recent update on April 15, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

Is CVE-2025-68312 actively exploited?

CVE-2025-68312 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 12.6% percentile likelihood of exploitation in the next 30 days — higher percentiles indicate greater predicted risk.

How do I remediate CVE-2025-68312?

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2025-68312, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

Dependency Blast Radius

See which npm, PyPI, Go, and Maven packages are affected by CVE-2025-68312

Explore →

Is Your Infrastructure Affected by CVE-2025-68312?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs