CVE-2025-68754

Source
https://nvd.nist.gov/vuln/detail/CVE-2025-68754
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68754.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-68754
Downstream
Published
2026-01-05T09:32:27.788Z
Modified
2026-01-06T03:00:27.357520Z
Summary
rtc: amlogic-a4: fix double free caused by devm
Details

In the Linux kernel, the following vulnerability has been resolved:

rtc: amlogic-a4: fix double free caused by devm

The clock obtained via devmclkgetenabled() is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clkdisable_unprepare() in error path and remove function causes double free.

Remove the redundant clkdisableunprepare() calls from the probe error path and amlrtcremove(), allowing the devm framework to automatically manage the clock lifecycle.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68754.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c89ac9182ee297597f1c6971045382bae19c3f9d
Fixed
9fed02c16488050cd4e33e045506336b216d7301
Fixed
2e1c79299036614ac32b251d145fad5391f4bcab
Fixed
384150d7a5b60c1086790a8ee07b0629f906cca2

Affected versions

v6.*

v6.12
v6.12-rc2
v6.12-rc3
v6.12-rc4
v6.12-rc5
v6.12-rc6
v6.12-rc7
v6.13
v6.13-rc1
v6.13-rc2
v6.13-rc3
v6.13-rc4
v6.13-rc5
v6.13-rc6
v6.13-rc7
v6.14
v6.14-rc1
v6.14-rc2
v6.14-rc3
v6.14-rc4
v6.14-rc5
v6.14-rc6
v6.14-rc7
v6.15
v6.15-rc1
v6.15-rc2
v6.15-rc3
v6.15-rc4
v6.15-rc5
v6.15-rc6
v6.15-rc7
v6.16
v6.16-rc1
v6.16-rc2
v6.16-rc3
v6.16-rc4
v6.16-rc5
v6.16-rc6
v6.16-rc7
v6.17
v6.17-rc1
v6.17-rc2
v6.17-rc3
v6.17-rc4
v6.17-rc5
v6.17-rc6
v6.17-rc7
v6.17.1
v6.17.10
v6.17.11
v6.17.12
v6.17.2
v6.17.3
v6.17.4
v6.17.5
v6.17.6
v6.17.7
v6.17.8
v6.17.9
v6.18
v6.18-rc1
v6.18-rc2
v6.18-rc3
v6.18-rc4
v6.18-rc5
v6.18-rc6
v6.18-rc7
v6.18.1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68754.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.17.13
Type
ECOSYSTEM
Events
Introduced
6.18.0
Fixed
6.18.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-68754.json"