CVE-2025-68307

medium

Description

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs The driver lacks the cleanup of failed transfers of URBs. This reduces the number of available URBs per error by 1. This leads to reduced performance and ultimately to a complete stop of the transmission. If the sending of a bulk URB fails do proper cleanup: - increase netdev stats - mark the echo_sbk as free - free the driver's context and do accounting - wake the send queue

References

https://git.kernel.org/stable/c/f7a5560675bd85efaf16ab01a43053670ff2b000

https://git.kernel.org/stable/c/9c8eb33b7008178b6ce88aa7593d12063ce60ca3

https://git.kernel.org/stable/c/516a0cd1c03fa266bb67dd87940a209fd4e53ce7

https://git.kernel.org/stable/c/4a82072e451eacf24fc66a445e906f5095d215db

https://git.kernel.org/stable/c/1a588c40a422a3663a52f1c5535e8fb6b044167d

Details

Source: Mitre, NVD

Published: 2025-12-16

Updated: 2025-12-18

Risk Information

CVSS v2

Base Score: 4.5

Vector: CVSS2#AV:L/AC:H/Au:S/C:N/I:P/A:C

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H

Severity: Medium

EPSS

EPSS: 0.00018