PT-2025-14349 · Linux+7 · Linux Kernel+7

Published 2025-02-28 · Updated 2026-04-20 · CVE-2025-21968

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue is reported when HDCP is destroyed but the property validate dwork queue is still running. This occurs in the drm/amd/display component of the Linux kernel. The issue is resolved by canceling the delayed work when destroying the workqueue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-5437

ALT-PU-2025-5786

ALT-PU-2025-6075

ALT-PU-2025-6382

ALT-PU-2025-6606

BDU:2025-12099

CVE-2025-21968

DLA-4178-1

DLA-4193-1

DSA-5900-1

ECHO-DD4D-FC93-A59A

MGASA-2025-0142

MGASA-2025-0146

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20206-1

SUSE-SU-2025:20270-1

SUSE-SU-2025:20283-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7591-1

USN-7591-2

USN-7591-3

USN-7591-4

USN-7591-5

USN-7591-6

USN-7592-1

USN-7593-1

USN-7597-1

USN-7597-2

USN-7598-1

USN-7602-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7655-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2072

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21968.json · Exploit
• https://ubuntu.com/security/CVE-2025-37811 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7764-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37740 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23147 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7593-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21978 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-21968 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7800-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46821 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21820 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-8805 · Vendor Advisory