PT-2025-42270 · Linux+4 · Linux Kernel+4
Published
2025-09-17
·
Updated
2026-05-07
·
CVE-2025-39996
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a use-after-free flaw within the b2c2 component, specifically in the
flexcop pci remove function. The issue arises because cancel delayed work() does not guarantee completion of the irq check work delayed work item before the flexcop device is freed, leading to a potential dereference of freed memory. A race condition can occur where flexcop pci remove() frees the device while irq check work() is still active. This was identified through static analysis and confirmed by a KASAN report. The root cause is the use of cancel delayed work() instead of cancel delayed work sync(), which ensures the delayed work item finishes before memory deallocation.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Suse
Ubuntu