Security Advisory

CVE-2025-68172

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-16 13:42:52
Last updated 2026-05-11 21:48:03
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: aspeed - fix double free caused by devm The clock obtained via devm_clk_get_enabled() is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clk_disable_unprepare() in error path and remove function causes double free. Remove the manual clock cleanup in both aspeed_acry_probe()s error path and aspeed_acry_remove().