PT-2026-1242 · Linux+3 · Linux Kernel+3

Publicado 2026-01-05 · Atualizado 2026-04-06 · CVE-2025-68754

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the amlogic-a4 Real Time Clock (RTC) driver. A double free issue occurs because the clock obtained via devm clk get enabled() is automatically managed by the devres framework and freed on driver detachment. Redundant calls to clk disable unprepare() in the error path and remove function trigger this double free. Removing these redundant calls allows the devres framework to manage the clock lifecycle automatically.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2025-68754

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Produtos afetados

Linuxmint

Linux Kernel

Ubuntu

Amlogic-A4

Referências · 414

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68754.json · Exploit
• https://suse.com/security/cve/CVE-2025-40042 · Nota
• https://ubuntu.com/security/CVE-2026-23111 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2025-68363 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-40089 · Nota
• https://suse.com/security/cve/CVE-2025-40026 · Nota
• https://suse.com/security/cve/CVE-2025-40029 · Nota
• https://suse.com/security/cve/CVE-2025-68349 · Nota
• https://ubuntu.com/security/CVE-2025-68223 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-68345 · Nota
• https://suse.com/security/cve/CVE-2025-68378 · Nota
• https://ubuntu.com/security/CVE-2025-68304 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-68765 · Nota
• https://suse.com/security/cve/CVE-2025-68263 · Nota
• https://ubuntu.com/security/CVE-2025-68299 · Aviso do Fabricante