CVE-2025-68822: 
Linux Kernel vulnerability analysis and mitigation

CVE-2025-68822 is a use-after-free vulnerability in the Linux kernel's ALPS touchpad input driver (drivers/input/mouse/alps.c), caused by a race condition involving the dev3_register_work delayed work item. The flaw allows a scenario where memory freed during device detachment (kfree(priv)) can subsequently be accessed by a still-scheduled work item (alps_register_bare_ps2_mouse()), resulting in a use-after-free condition. It was published on January 13, 2026, and affects the Linux kernel across multiple stable branches. The CVSS score has not been formally assigned at this time, and the CVE status is listed as Unknown (Red Hat CVE, CVE.org).

The root cause is a race condition (CWE-416: Use After Free) in the ALPS PS/2 touchpad driver. The dev3_register_work delayed work item is initialized in alps_reconnect() and scheduled when a bare PS/2 packet is received from an external device connected to the ALPS touchpad. During device detachment, psmouse_disconnect() calls flush_workqueue() to drain pending work, but this only waits for work items already queued at the time of the call — any work submitted after flush_workqueue() returns is not awaited. This creates a window where alps_disconnect() can call kfree(priv) on CPU 0 while CPU 1 is still executing alps_register_bare_ps2_mouse(), which dereferences priv via container_of(work, ...), resulting in a use-after-free memory access (Red Hat CVE).

Successful exploitation of this race condition can lead to kernel memory corruption, potentially causing a system crash (denial of service) or, in more severe scenarios, privilege escalation if an attacker can control the freed memory region before it is reused. The vulnerability is local in nature, requiring the ability to trigger device attach/detach events on a system with an ALPS touchpad and an external PS/2 device. The primary risk is system instability or kernel panic, with a secondary risk of local privilege escalation depending on heap layout (Red Hat CVE).

The fix has been committed to the Linux kernel stable tree via patches at multiple stable branch commits (e.g., a9c115e017b2, bf40644ef8c8, ed8c61b89be0). Downstream distributions have issued security advisories and updated kernel packages: Ubuntu has released fixes in USN-8177-1, USN-8177-2, USN-8183-1, USN-8183-2, USN-8245-1, and USN-8257-1. Users should update to the latest patched kernel version provided by their Linux distribution. As a workaround, avoiding the use of external PS/2 devices with ALPS touchpad-equipped systems can reduce exposure until a patch is applied (Ubuntu USN-8177-1, Ubuntu USN-8183-1, Red Hat CVE).

The vulnerability has been tracked by major Linux distribution security teams, with Ubuntu issuing multiple kernel security notices (USN-8177-1/2, USN-8183-1/2, USN-8245-1, USN-8257-1) and Red Hat publishing a CVE advisory. Tenable has released multiple Nessus detection plugins (IDs 283634, 298403, 299777, 307005, 307549, 314228, 314219, 319993) to identify vulnerable systems. No notable public researcher commentary or social media discussion has been identified beyond standard distribution security channels (Ubuntu USN-8177-1, Red Hat CVE).