CVE-2025-68204

Not scored yetLast modified Oct 14, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

pmdomain: arm: scmi: Fix genpd leak on provider registration failure

If of_genpd_add_provider_onecell() fails during probe, the previously created generic power domains are not removed, leading to a memory leak and potential kernel crash later in genpd_debug_add().

Add proper error handling to unwind the initialized domains before returning from probe to ensure all resources are correctly released on failure.

Example crash trace observed without this fix:

| Unable to handle kernel paging request at virtual address fffffffffffffc70 | CPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.18.0-rc1 #405 PREEMPT | Hardware name: ARM LTD ARM Juno Development Platform/ARM Juno Development Platform | pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : genpd_debug_add+0x2c/0x160 | lr : genpd_debug_init+0x74/0x98 | Call trace: | genpd_debug_add+0x2c/0x160 (P) | genpd_debug_init+0x74/0x98 | do_one_initcall+0xd0/0x2d8 | do_initcall_level+0xa0/0x140 | do_initcalls+0x60/0xa8 | do_basic_setup+0x28/0x40 | kernel_init_freeable+0xe8/0x170 | kernel_init+0x2c/0x140 | ret_from_fork+0x10/0x20

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 898216c97ed2ebfffda659ce12388da43534de6c, < 18249a167ffd91b4b4fbd92afd4ddcbf3af81f35; >= 898216c97ed2ebfffda659ce12388da43534de6c, < c6e11d320fd6cbaef6d589f2fcb45aa25a6b960a; >= 898216c97ed2ebfffda659ce12388da43534de6c, < 582f48d22eb5676fe7be3589b986ddd29f7bf4d1; >= 898216c97ed2ebfffda659ce12388da43534de6c, < 7f569197f7ad09319af960bd7e43109de5c67c04; >= 898216c97ed2ebfffda659ce12388da43534de6c, < ad120c08b89a81d41d091490bbe150343473b659; >= 898216c97ed2ebfffda659ce12388da43534de6c, < 921b090841ae7a08b19ab14495bdf8636dc31e21; >= 898216c97ed2ebfffda659ce12388da43534de6c, < 983e91da82ec3e331600108f9be3ea61236f5c75; >= 898216c97ed2ebfffda659ce12388da43534de6c, < 7458f72cc28f9eb0de811effcb5376d0ec19094a
LinuxLinux4.17

References

Timeline

Published
Dec 16, 2025
Last modified
Oct 14, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-68205In the Linux kernel, the following vulnerability has been resolved: ALSA: hda/hdmi: Fix breakage at probing nvhdmi-mcp driver After restruCVE-2025-682067.5In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections SequencCVE-2025-682077.8In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Synchronize Dead CT worker with unbind Cancel and wait forCVE-2025-682087.8In the Linux kernel, the following vulnerability has been resolved: bpf: account for current allocated stack depth in widen_imprecise_scalaCVE-2025-68209In the Linux kernel, the following vulnerability has been resolved: mlx5: Fix default values in create CQ Currently, CQs without a completCVE-2025-68219.8A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. This affects an unknown partCVE-2025-68210In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loop due to incomplete zstd-compressed data CurrCVE-2025-682115.5In the Linux kernel, the following vulnerability has been resolved: ksm: use range-walk function to jump over holes in scan_get_next_rmap_iCVE-2025-682127.8In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized 'offp' in statmount_string() In statmount_stringCVE-2025-68213In the Linux kernel, the following vulnerability has been resolved: idpf: fix possible vport_config NULL pointer deref in remove AttemptinCVE-2025-682144.7In the Linux kernel, the following vulnerability has been resolved: timers: Fix NULL function pointer race in timer_shutdown_sync() There CVE-2025-682157.0In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP cleanup on driver removal in error path Improve the clean
CVE-2025-68204: Unscored | Vulnix