https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 12:07:58 +0000 https://vulnerability.circl.lu/vuln/cve-2025-68249 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>most: usb: hdm_probe: Fix calling put_device() before device initialization</p> <p>The early error path in hdm_probe() can jump to err_free_mdev before &amp;mdev-&gt;dev has been initialized with device_initialize(). Calling put_device(&amp;mdev-&gt;dev) there triggers a device core WARN and ends up invoking kref_put(&amp;kobj-&gt;kref, kobject_release) on an uninitialized kobject.</p> <p>In this path the private struct was only kmalloc&#39;ed and the intended release is effectively kfree(mdev) anyway, so free it directly instead of calling put_device() on an uninitialized device.</p> <p>This removes the WARNING and fixes the pre-initialization error path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>most: usb: hdm_probe: Fix calling put_device() before device initialization</p> <p>The early error path in hdm_probe() can jump to err_free_mdev before &amp;mdev-&gt;dev has been initialized with device_initialize(). Calling put_device(&amp;mdev-&gt;dev) there triggers a device core WARN and ends up invoking kref_put(&amp;kobj-&gt;kref, kobject_release) on an uninitialized kobject.</p> <p>In this path the private struct was only kmalloc&#39;ed and the intended release is effectively kfree(mdev) anyway, so free it directly instead of calling put_device() on an uninitialized device.</p> <p>This removes the WARNING and fixes the pre-initialization error path.</p> https://vulnerability.circl.lu/vuln/cve-2025-68249