PT-2025-11018 · Linux+5 · Linux Kernel+5
Published
2025-02-14
·
Updated
2025-10-03
·
CVE-2025-21856
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A use-after-free issue has been identified in the Linux kernel. The problem arises because a device without a release function is considered broken and must be fixed. The current code frees the device after calling
device add() without waiting for other kernel parts to release their references, potentially leading to use-after-free issues if a proper release function is not set. This issue is related to the s390/ism component and the device release() function in /drivers/base/core.c.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu