Not yet scoredPublished Dec 24, 2025

CVE-2025-68734isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe()

Updated under an hour ago (Oct 28, 2026, 8:23 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: isdn: mISDN: hfcsusb: fix memory leak in hfcsusb_probe() In hfcsusb_probe(), the memory allocated for ctrl_urb gets leaked when setup_instance() fails with an error code. Fix that by freeing the urb before freeing the hw structure. Also change the error paths to use the goto ladder style. Compile tested only. Issue found using a prototype static analysis tool.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 69f52adb2d534afc41fcc658f155e01f0b322f9e before 475032fa2bb82ffb592c321885e917e39f47357f; from 69f52adb2d534afc41fcc658f155e01f0b322f9e before adb7577e23a431fc53aa1b6107733c0d751015fb; from 69f52adb2d534afc41fcc658f155e01f0b322f9e before b70c24827e11fdc71465f9207e974526fb457bb9; 69f52adb2d534afc41fcc658f155e01f0b322f9e builds before 3f7c72bc73c4e542fde14cce017549d8a0b61a3c; from 69f52adb2d534afc41fcc658f155e01f0b322f9e before 03695541b3349bc40bf5d6563d44d6147fb20260; 69f52adb2d534afc41fcc658f155e01f0b322f9e builds before 6dce43433e0635e7b00346bc937b69ce48ea71bb; from 69f52adb2d534afc41fcc658f155e01f0b322f9e before ea7936304ed74ab7f965d17f942a173ce91a5ca8; 69f52adb2d534afc41fcc658f155e01f0b322f9e builds before 3f978e3f1570155a1327ffa25f60968bc7b9398f	CNA record

References

References

https://git.kernel.org/stable/c/475032fa2bb82ffb592c321885e917e39f47357f
https://git.kernel.org/stable/c/adb7577e23a431fc53aa1b6107733c0d751015fb
https://git.kernel.org/stable/c/b70c24827e11fdc71465f9207e974526fb457bb9
https://git.kernel.org/stable/c/3f7c72bc73c4e542fde14cce017549d8a0b61a3c
https://git.kernel.org/stable/c/03695541b3349bc40bf5d6563d44d6147fb20260
https://git.kernel.org/stable/c/6dce43433e0635e7b00346bc937b69ce48ea71bb
https://git.kernel.org/stable/c/ea7936304ed74ab7f965d17f942a173ce91a5ca8
https://git.kernel.org/stable/c/3f978e3f1570155a1327ffa25f60968bc7b9398f

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.