Search: CVE-2025-68287

A race condition vulnerability in the Linux kernel's USB subsystem (dwc3 driver) was fixed. The flaw involved unsynchronized concurrent calls to dwc3_remove_requests(), causing premature freeing of USB requests and potential kernel crashes due to use-after-free conditions. The issue arises from three distinct execution paths interacting without proper synchronization, particularly during USB reset handling and adb root operations. The patch adds checks to ensure requests are not processed after completion, preventing crashes.