FKIE_CVE-2025-68307

Vulnerability from fkie_nvd - Published: 2025-12-16 16:16 - Updated: 2026-10-14 16:10
Severity
Summary
In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs The driver lacks the cleanup of failed transfers of URBs. This reduces the number of available URBs per error by 1. This leads to reduced performance and ultimately to a complete stop of the transmission. If the sending of a bulk URB fails do proper cleanup: - increase netdev stats - mark the echo_sbk as free - free the driver's context and do accounting - wake the send queue
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1a588c40a422a3663a52f1c5535e8fb6b044167d
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/4a82072e451eacf24fc66a445e906f5095d215db
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/516a0cd1c03fa266bb67dd87940a209fd4e53ce7
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/87974ebd6552817492daec7866ebfa2c484fa2ac
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9c8eb33b7008178b6ce88aa7593d12063ce60ca3
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/f7a5560675bd85efaf16ab01a43053670ff2b000
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/can/usb/gs_usb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "87974ebd6552817492daec7866ebfa2c484fa2ac",
              "status": "affected",
              "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
              "versionType": "git"
            },
            {
              "lessThan": "f7a5560675bd85efaf16ab01a43053670ff2b000",
              "status": "affected",
              "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
              "versionType": "git"
            },
            {
              "lessThan": "1a588c40a422a3663a52f1c5535e8fb6b044167d",
              "status": "affected",
              "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
              "versionType": "git"
            },
            {
              "lessThan": "4a82072e451eacf24fc66a445e906f5095d215db",
              "status": "affected",
              "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
              "versionType": "git"
            },
            {
              "lessThan": "9c8eb33b7008178b6ce88aa7593d12063ce60ca3",
              "status": "affected",
              "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
              "versionType": "git"
            },
            {
              "lessThan": "516a0cd1c03fa266bb67dd87940a209fd4e53ce7",
              "status": "affected",
              "version": "d08e973a77d128b25e01a08c34d89593fdf222da",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/can/usb/gs_usb.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.16"
            },
            {
              "lessThan": "3.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.209",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.159",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.119",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.61",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.17.*",
              "status": "unaffected",
              "version": "6.17.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.18",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: gs_usb: gs_usb_xmit_callback(): fix handling of failed transmitted URBs\n\nThe driver lacks the cleanup of failed transfers of URBs. This reduces the\nnumber of available URBs per error by 1. This leads to reduced performance\nand ultimately to a complete stop of the transmission.\n\nIf the sending of a bulk URB fails do proper cleanup:\n- increase netdev stats\n- mark the echo_sbk as free\n- free the driver\u0027s context and do accounting\n- wake the send queue"
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ncan: gs_usb: gs_usb_xmit_callback(): soluciona el manejo de URBs transmitidos fallidos\n\nEl controlador carece de la limpieza de transferencias fallidas de URBs. Esto reduce el n\u00famero de URBs disponibles por error en 1. Esto lleva a un rendimiento reducido y, en \u00faltima instancia, a una detenci\u00f3n completa de la transmisi\u00f3n.\n\nSi el env\u00edo de un URB de tipo bulk falla, realizar una limpieza adecuada:\n- incrementar las estad\u00edsticas de netdev\n- marcar el echo_sbk como libre\n- liberar el contexto del controlador y realizar la contabilidad\n- despertar la cola de env\u00edo"
    }
  ],
  "id": "CVE-2025-68307",
  "lastModified": "2026-10-14T16:10:00.250",
  "metrics": {},
  "published": "2025-12-16T16:16:10.240",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/1a588c40a422a3663a52f1c5535e8fb6b044167d"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/4a82072e451eacf24fc66a445e906f5095d215db"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/516a0cd1c03fa266bb67dd87940a209fd4e53ce7"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/87974ebd6552817492daec7866ebfa2c484fa2ac"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/9c8eb33b7008178b6ce88aa7593d12063ce60ca3"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/f7a5560675bd85efaf16ab01a43053670ff2b000"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Deferred"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.