PT-2025-53005 · Linux+3 · Linux Kernel+3

Published 2025-11-23 · Updated 2026-04-06 · CVE-2025-68739

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the Linux kernel related to the handling of Online Performance Points (OPP) within the devfreq subsystem for HiSilicon platforms. The issue arises from a potential incorrect order of resource acquisition and release, specifically when calling the dev pm opp put() function before all necessary data is acquired. This can lead to a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-04219

CVE-2025-68739

OPENSUSE-SU-2026:10039-1

OPENSUSE-SU-2026:10301-1

USN-8094-1

USN-8094-2

USN-8094-3

USN-8094-4

USN-8094-5

USN-8152-1

Affected Products

Hisilicon Platforms

Linuxmint

Linux Kernel

Ubuntu

References · 416

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68739.json · Exploit
• https://ubuntu.com/security/CVE-2025-68227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71128 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-68739 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40260 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8152-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23060 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68742 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40254 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68283 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68751 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68220 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68362 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40255 · Vendor Advisory