CVE-2025-40095

usb: gadget: f_rndis: Refactor bind path to use __free()

References

Notes

 carnil> Introduced in 45fe3b8e5342 ("usb ethernet gadget: split RNDIS function").
 carnil> Vulnerable versions: 2.6.27.

Bugs

Status

Branch Status
upstream released (6.18-rc1) [08228941436047bdcd35a612c1aec0912a29d8cd]
6.18-upstream-stable N/A "Fixed before branching point"
6.17-upstream-stable released (6.17.5) [a8366263b7e5b663d7fb489d3a9ba1e2600049a6]
6.12-upstream-stable released (6.12.55) [380353c3a92be7d928e6f973bd065c5b79755ac3]
6.6-upstream-stable released (6.6.114) [5f65c8ad8c7292ed7e3716343fcd590a51818cc3]
6.1-upstream-stable released (6.1.158) [ef81226bb1f8b6e761cd0b53d2696e9c1bc955d1]
5.10-upstream-stable needed
sid released (6.17.6-1)
6.12-trixie-security released (6.12.57-1)
6.1-bookworm-security released (6.1.158-1)
5.10-bullseye-security needed