CVE-2025-68172
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
16/12/2025
Last modified:
18/12/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
crypto: aspeed - fix double free caused by devm<br />
<br />
The clock obtained via devm_clk_get_enabled() is automatically managed<br />
by devres and will be disabled and freed on driver detach. Manually<br />
calling clk_disable_unprepare() in error path and remove function<br />
causes double free.<br />
<br />
Remove the manual clock cleanup in both aspeed_acry_probe()&#39;s error<br />
path and aspeed_acry_remove().



