PT-2025-8798 · Linux+7 · Linux Kernel+7

Chenyuan Yang · Published 2025-01-23 · Updated 2026-04-20 · CVE-2025-21715

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free (UAF) bug has been identified in the Linux kernel, specifically in the dm9000 drv remove function. The issue arises when the dm variable, which is netdev private data, is used after the free netdev() call. This can cause a UAF bug. The problem is similar to a previously fixed issue in the emac remove function. The bug was detected using a static analysis tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Double Free

Weakness Enumeration

CWE-416

CWE-415

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-5359

ALT-PU-2025-5361

ALT-PU-2025-5437

BDU:2025-03897

CVE-2025-21715

DLA-4102-1

DLA-4178-1

LSN-0117-1

OESA-2025-1339

OESA-2025-1340

OESA-2025-1409

OESA-2025-1410

OPENSUSE-SU-2025_0847-1

OPENSUSE-SU-2025_0856-1

OPENSUSE-SU-2025_0955-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:0847-1

SUSE-SU-2025:0856-1

SUSE-SU-2025:0955-1

SUSE-SU-2025:20190-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20260-1

SUSE-SU-2025:20270-1

SUSE-SU-2025_0847-1

SUSE-SU-2025_0856-1

SUSE-SU-2025_0955-1

USN-7510-1

USN-7510-2

USN-7510-3

USN-7510-4

USN-7510-5

USN-7510-6

USN-7510-7

USN-7510-8

USN-7511-1

USN-7511-2

USN-7511-3

USN-7512-1

USN-7516-1

USN-7516-2

USN-7516-3

USN-7516-4

USN-7516-5

USN-7516-6

USN-7516-7

USN-7516-8

USN-7516-9

USN-7517-1

USN-7517-2

USN-7517-3

USN-7518-1

USN-7521-1

USN-7521-2

USN-7521-3

USN-7539-1

USN-7540-1

USN-7593-1

USN-7602-1

USN-7640-1

USN-7651-1

USN-7651-2

USN-7651-3

USN-7651-4

USN-7651-5

USN-7651-6

USN-7652-1

USN-7653-1

USN-7737-1

USN-7907-1

USN-7907-2

USN-7907-3

USN-7907-4

USN-7907-5

USN-7930-1

USN-7930-2

USN-7937-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2118

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21715.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-21828 · Security Note
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57922 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50008 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7651-6 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47756 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-53145 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57807 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-47211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57838 · Security Note
• https://ubuntu.com/security/notices/USN-7516-5 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49924 · Vendor Advisory