{"cve":"CVE-2025-68306","nvd":{"published":"2025-12-16T16:16:10.137","modified":"2026-10-14T16:10:00.250","status":"Deferred","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface\n\nWhen performing reset tests and encountering abnormal card drop issues\nthat lead to a kernel crash, it is necessary to perform a null check\nbefore releasing resources to avoid attempting to release a null pointer.\n\n<4>[   29.158070] Hardware name: Google Quigon sku196612/196613 board (DT)\n<4>[   29.158076] Workqueue: hci0 hci_cmd_sync_work [bluetooth]\n<4>[   29.158154] pstate: 20400009 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n<4>[   29.158162] pc : klist_remove+0x90/0x158\n<4>[   29.158174] lr : klist_remove+0x88/0x158\n<4>[   29.158180] sp : ffffffc0846b3c00\n<4>[   29.158185] pmr_save: 000000e0\n<4>[   29.158188] x29: ffffffc0846b3c30 x28: ffffff80cd31f880 x27: ffffff80c1bdc058\n<4>[   29.158199] x26: dead000000000100 x25: ffffffdbdc624ea3 x24: ffffff80c1bdc4c0\n<4>[   29.158209] x23: ffffffdbdc62a3e6 x22: ffffff80c6c07000 x21: ffffffdbdc829290\n<4>[   29.158219] x20: 0000000000000000 x19: ffffff80cd3e0648 x18: 000000031ec97781\n<4>[   29.158229] x17: ffffff80c1bdc4a8 x16: ffffffdc10576548 x15: ffffff80c1180428\n<4>[   29.158238] x14: 0000000000000000 x13: 000000000000e380 x12: 0000000000000018\n<4>[   29.158248] x11: ffffff80c2a7fd10 x10: 0000000000000000 x9 : 0000000100000000\n<4>[   29.158257] x8 : 0000000000000000 x7 : 7f7f7f7f7f7f7f7f x6 : 2d7223ff6364626d\n<4>[   29.158266] x5 : 0000008000000000 x4 : 0000000000000020 x3 : 2e7325006465636e\n<4>[   29.158275] x2 : ffffffdc11afeff8 x1 : 0000000000000000 x0 : ffffffdc11be4d0c\n<4>[   29.158285] Call trace:\n<4>[   29.158290]  klist_remove+0x90/0x158\n<4>[   29.158298]  device_release_driver_internal+0x20c/0x268\n<4>[   29.158308]  device_release_driver+0x1c/0x30\n<4>[   29.158316]  usb_driver_release_interface+0x70/0x88\n<4>[   29.158325]  btusb_mtk_release_iso_intf+0x68/0xd8 [btusb (HASH:e8b6 5)]\n<4>[   29.158347]  btusb_mtk_reset+0x5c/0x480 [btusb (HASH:e8b6 5)]\n<4>[   29.158361]  hci_cmd_sync_work+0x10c/0x188 [bluetooth (HASH:a4fa 6)]\n<4>[   29.158430]  process_scheduled_works+0x258/0x4e8\n<4>[   29.158441]  worker_thread+0x300/0x428\n<4>[   29.158448]  kthread+0x108/0x1d0\n<4>[   29.158455]  ret_from_fork+0x10/0x20\n<0>[   29.158467] Code: 91343000 940139d1 f9400268 927ff914 (f9401297)\n<4>[   29.158474] ---[ end trace 0000000000000000 ]---\n<0>[   29.167129] Kernel panic - not syncing: Oops: Fatal exception\n<2>[   29.167144] SMP: stopping secondary CPUs\n<4>[   29.167158] ------------[ cut here ]------------","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/4015b979767125cf8a2233a145a3b3af78bfd8fb","https://git.kernel.org/stable/c/421e88a0d85782786b7a1764c75518b4845e07b3","https://git.kernel.org/stable/c/faae9f2ea8806f2499186448adbf94689b47b82b"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:17:07.138532058+00:00"},"epss":{"cve":"CVE-2025-68306","score":0.00192,"percentile":0.08758,"date":"2026-10-25"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}