Not yet scoredPublished Dec 16, 2025

CVE-2025-68307can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs

Updated under an hour ago (Oct 26, 2026, 11:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs The driver lacks the cleanup of failed transfers of URBs. This reduces the number of available URBs per error by 1. This leads to reduced performance and ultimately to a complete stop of the transmission. If the sending of a bulk URB fails do proper cleanup: - increase netdev stats - mark the echo_sbk as free - free the driver's context and do accounting - wake the send queue

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Jun 1, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from d08e973a77d128b25e01a08c34d89593fdf222da before 87974ebd6552817492daec7866ebfa2c484fa2ac; from d08e973a77d128b25e01a08c34d89593fdf222da before f7a5560675bd85efaf16ab01a43053670ff2b000; from d08e973a77d128b25e01a08c34d89593fdf222da before 1a588c40a422a3663a52f1c5535e8fb6b044167d; from d08e973a77d128b25e01a08c34d89593fdf222da before 4a82072e451eacf24fc66a445e906f5095d215db; from d08e973a77d128b25e01a08c34d89593fdf222da before 9c8eb33b7008178b6ce88aa7593d12063ce60ca3; from d08e973a77d128b25e01a08c34d89593fdf222da before 516a0cd1c03fa266bb67dd87940a209fd4e53ce7	CNA record

References

References

https://git.kernel.org/stable/c/87974ebd6552817492daec7866ebfa2c484fa2ac
https://git.kernel.org/stable/c/f7a5560675bd85efaf16ab01a43053670ff2b000
https://git.kernel.org/stable/c/1a588c40a422a3663a52f1c5535e8fb6b044167d
https://git.kernel.org/stable/c/4a82072e451eacf24fc66a445e906f5095d215db
https://git.kernel.org/stable/c/9c8eb33b7008178b6ce88aa7593d12063ce60ca3
https://git.kernel.org/stable/c/516a0cd1c03fa266bb67dd87940a209fd4e53ce7

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.