CVE-2025-68754

rtc: amlogic-a4: fix double free caused by devm

State
Published
Severity
Not scored
Published
Jan 5, 2026
Updated
May 11, 2026
Reserved
Dec 24, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rtc: amlogic-a4: fix double free caused by devm

The clock obtained via devm_clk_get_enabled() is automatically managed by devres and will be disabled and freed on driver detach. Manually calling clk_disable_unprepare() in error path and remove function causes double free.

Remove the redundant clk_disable_unprepare() calls from the probe error path and aml_rtc_remove(), allowing the devm framework to automatically manage the clock lifecycle.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • c89ac9182ee297597f1c6971045382bae19c3f9d to before 9fed02c16488050cd4e33e045506336b216d7301Affected
  • c89ac9182ee297597f1c6971045382bae19c3f9d to before 2e1c79299036614ac32b251d145fad5391f4bcabAffected
  • c89ac9182ee297597f1c6971045382bae19c3f9d to before 384150d7a5b60c1086790a8ee07b0629f906cca2Affected
LinuxLinux
  • 6.13Affected
  • before 6.13Not affected
  • 6.17.13 through 6.17.*Not affected
  • 6.18.2 through 6.18.*Not affected
  • 6.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.