CVE-2025-68789

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> hwmon: (ibmpex) fix use-after-free in high/low store<br /> <br /> The ibmpex_high_low_store() function retrieves driver data using<br /> dev_get_drvdata() and uses it without validation. This creates a race<br /> condition where the sysfs callback can be invoked after the data<br /> structure is freed, leading to use-after-free.<br /> <br /> Fix by adding a NULL check after dev_get_drvdata(), and reordering<br /> operations in the deletion path to prevent TOCTOU.