Bug 2429115 (CVE-2025-68789) - CVE-2025-68789 kernel: hwmon: (ibmpex) fix use-after-free in high/low store
Summary: CVE-2025-68789 kernel: hwmon: (ibmpex) fix use-after-free in high/low store
Keywords:
Status: NEW
Alias: CVE-2025-68789
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-01-13 16:07 UTC by OSIDB Bzimport
Modified: 2026-01-14 22:15 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description OSIDB Bzimport 2026-01-13 16:07:48 UTC
In the Linux kernel, the following vulnerability has been resolved:

hwmon: (ibmpex) fix use-after-free in high/low store

The ibmpex_high_low_store() function retrieves driver data using
dev_get_drvdata() and uses it without validation. This creates a race
condition where the sysfs callback can be invoked after the data
structure is freed, leading to use-after-free.

Fix by adding a NULL check after dev_get_drvdata(), and reordering
operations in the deletion path to prevent TOCTOU.


Note You need to log in before you can comment on or make changes to this bug.