Answer in brief
CVE-2025-68324 records a Unknown severity vulnerability in scsi: imm: Fix use-after-free bug caused by unfinished delayed work. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 2.6.12 | Not reported |
| Linux/Linuxgeneric | >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <9a8e53154353580d53f7f86a253927e41294017e || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <31ab2aad7a7b7501e904a09bf361e44671f66092 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <48dd41fa2d6c6a0c50e714deeba06ffe7f91961b || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <9e434426cc23ad5e2aad649327b59aea00294b13 || >=1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <ab58153ec64fa3fc9aea09ca09dc9322e0b54a7c | 9a8e53154353580d53f7f86a253927e41294017e, 31ab2aad7a7b7501e904a09bf361e44671f66092, 48dd41fa2d6c6a0c50e714deeba06ffe7f91961b, 9e434426cc23ad5e2aad649327b59aea00294b13, ab58153ec64fa3fc9aea09ca09dc9322e0b54a7c |
Published upstream
Dec 18, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 20, 2026
In the Linux kernel, the following vulnerability has been resolved: scsi: imm: Fix use-after-free bug caused by unfinished delayed work The delayed work item 'imm_tq' is initialized in imm_attach() and scheduled via imm_queuecommand() for processing SCSI commands. When the IMM parallel port SCSI host adapter is detached through imm_detach(), the imm_struct device instance is deallocated. However, the delayed work might still be pending or executing when imm_detach() is called, leading to use-after-free bugs when the work function imm_interrupt() accesses the already freed imm_struct memory. The race condition can occur as follows: CPU 0(detach thread) | CPU 1 | imm_queuecommand() | imm_queuecommand_lck() imm_detach() | schedule_delayed_work() kfree(dev) //FREE | imm_interrupt() | dev = container_of(...) //USE dev-> //USE Add disable_delayed_work_sync() in imm_detach() to guarantee proper cancellation of the delayed work item before imm_struct is deallocated.
Quoted source text, attributed separately from HOL analysis.