CVE-2025-68204: linux

CVSS: UnknownDeferred
AliasesUBUNTU-CVE-2025-68204DEBIAN-CVE-2025-68204
Published 16-12-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-68204 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.5% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 41 · Related 38
DLA-4436-1MGASA-2026-0017MGASA-2026-0018OPENSUSE-SU-2026:21555-1SUSE-SU-2026:0278-1SUSE-SU-2026:0281-1

Timeline

  1. 16-12-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: pmdomain: arm: scmi: Fix genpd leak on provider registration failure If of_genpd_add_provider_onecell() fails during probe, the previously created generic power domains are not removed, leading to a memory leak and potential kernel crash later in genpd_debug_add(). Add proper error handling to unwind the initialized domains before returning from probe to ensure all resources are correctly released on failure. Example crash trace observed without this fix: | Unable to handle kernel paging request at virtual address fffffffffffffc70 | CPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.18.0-rc1 #405 PREEMPT | Hardware name: ARM LTD ARM Juno Development Platform/ARM Juno Development Platform | pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : genpd_debug_add+0x2c/0x160 | lr : genpd_debug_init+0x74/0x98 | Call trace: | genpd_debug_add+0x2c/0x160 (P) | genpd_debug_init+0x74/0x98 | do_one_initcall+0xd0/0x2d8 | do_initcall_level+0xa0/0x140 | do_initcalls+0x60/0xa8 | do_basic_setup+0x28/0x40 | kernel_init_freeable+0xe8/0x170 | kernel_init+0x2c/0x140 | ret_from_fork+0x10/0x20

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

0.00 pp

From 0.21% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu149 products
  • linuxAll versions (No fix recorded) | < 5.15.0-173.183 | < 6.8.0-106.106 | < 6.17.0-14.14
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1103.110 | < 6.8.0-1050.53 | < 6.17.0-1007.7
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian1 product
  • linux< 6.1.159-1 | < 6.12.63-1 | < 6.17.9-1
Linux1 product
  • linux≥ 898216c97ed2ebfffda659ce12388da43534de6c, < 18249a167ffd91b4b4fbd92afd4ddcbf3af81f35 | ≥ 898216c97ed2ebfffda659ce12388da43534de6c, < c6e11d320fd6cbaef6d589f2fcb45aa25a6b960a | ≥ 898216c97ed2ebfffda659ce12388da43534de6c, < 582f48d22eb5676fe7be3589b986ddd29f7bf4d1 | ≥ 898216c97ed2ebfffda659ce12388da43534de6c, < 7f569197f7ad09319af960bd7e43109de5c67c04 | ≥ 898216c97ed2ebfffda659ce12388da43534de6c, < ad120c08b89a81d41d091490bbe150343473b659 | ≥ 898216c97ed2ebfffda659ce12388da43534de6c, < 921b090841ae7a08b19ab14495bdf8636dc31e21 | ≥ 898216c97ed2ebfffda659ce12388da43534de6c, < 983e91da82ec3e331600108f9be3ea61236f5c75 | ≥ 898216c97ed2ebfffda659ce12388da43534de6c, < 7458f72cc28f9eb0de811effcb5376d0ec19094a | 4.17

3 vendors · 151 products

References

37 links
Show all 37 references