In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_eem: Fix memory leak in eem_unwrap
The existing code did not handle the failure case of usb_ep_queue in the command path, potentially leading to memory leaks.
Improve error handling to free all allocated resources on usb_ep_queue failure. This patch continues to use goto logic for error handling, as the existing error handling is complex and not easily adaptable to auto-cleanup helpers.
kmemleak results: unreferenced object 0xffffff895a512300 (size 240): backtrace: slab_post_alloc_hook+0xbc/0x3a4 kmem_cache_alloc+0x1b4/0x358 skb_clone+0x90/0xd8 eem_unwrap+0x1cc/0x36c unreferenced object 0xffffff8a157f4000 (size 256): backtrace: slab_post_alloc_hook+0xbc/0x3a4 __kmem_cache_alloc_node+0x1b4/0x2dc kmalloc_trace+0x48/0x140 dwc3_gadget_ep_alloc_request+0x58/0x11c usb_ep_alloc_request+0x40/0xe4 eem_unwrap+0x204/0x36c unreferenced object 0xffffff8aadbaac00 (size 128): backtrace: slab_post_alloc_hook+0xbc/0x3a4 __kmem_cache_alloc_node+0x1b4/0x2dc __kmalloc+0x64/0x1a8 eem_unwrap+0x218/0x36c unreferenced object 0xffffff89ccef3500 (size 64): backtrace: slab_post_alloc_hook+0xbc/0x3a4 __kmem_cache_alloc_node+0x1b4/0x2dc kmalloc_trace+0x48/0x140 eem_unwrap+0x238/0x36c
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Dec 18, 2025 | Dec 18, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-6.17Upgrade linux-image-5.15.0-1067-xilinx-zynqmpUpgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-fips-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.17Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1109-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1044-nvidia-tegra-igx-rtUpgrade linux-image-xilinxUpgrade linux-image-virtual-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-5.15.0-1098-nvidiaUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1055-nvidia-tegra-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-64kUpgrade linux-image-gcpUpgrade linux-image-gcp-6.17Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1095-kvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-fipsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-awsUpgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1102-realtimeUpgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-5.15.0-1100-oracleUpgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-oracle-6.17Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1098-nvidia-lowlatencyUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1097-ibmUpgrade linux-image-azure-fipsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-173-generic-lpaeUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1103-awsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1097-raspiUpgrade linux-image-5.15.0-173-fipsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1099-gkeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-intelUpgrade linux-image-generic-64k-6.17Upgrade linux-image-genericUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-kvm-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-6.17.0-1009-awsUpgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04cUpgrade linux-image-gcp-fipsUpgrade linux-image-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1044-nvidia-tegra-igxUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-6.17Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibmUpgrade linux-image-raspi-6.17Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-173-lowlatency-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-5.15.0-1103-gcpUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-oem-24.04dUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-5.15.0-173-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1098-intel-iotgUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gke-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1103-gcp-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-64k-6.17Upgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-5.15.0-173-genericUpgrade linux-image-5.15.0-1094-intel-iot-realtimeUpgrade linux-image-5.15.0-1055-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-5.15.0-1109-azure-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-5.15.0-1110-azureUpgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-5.15.0-173-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.17.0-19-genericUpgrade linux-image-nvidia-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-106-genericUpgrade linux-image-aws-6.17Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-lowlatencyUpgrade linux-image-azure-6.17Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1103-aws-fipsUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-5.15.0-1086-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1103-aws-64kUpgrade linux-image-azure-5.15 | Mar 17, 2026 | Dec 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Dec 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub