PT-2025-8993 · Linux+6 · Linux Kernel+6

Published 2025-01-23 · Updated 2026-04-20 · CVE-2025-21802

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A issue in the Linux kernel has been resolved, related to the hns3 driver. When unloading the hclge driver, it attempts to disable SR-IOV for each ae dev node, which can cause an oops if the hns3 driver is unloaded simultaneously. This is because the hns3 driver removes all ae dev nodes, potentially leading to a deadlock. The problem cannot be solved by using the hnae3 common lock due to its use in the pci disable sriov() process flow, which triggers the removal of VF and also takes the hnae3 common lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-413

Related Identifiers

BDU:2025-12055

CVE-2025-21802

DLA-4102-1

DLA-4178-1

OESA-2025-1248

OESA-2025-1249

OESA-2025-2554

OESA-2025-2555

OPENSUSE-SU-2025_0847-1

OPENSUSE-SU-2025_0856-1

OPENSUSE-SU-2025_0955-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:0847-1

SUSE-SU-2025:0856-1

SUSE-SU-2025:0955-1

SUSE-SU-2025:1293-1

SUSE-SU-2025:20190-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20260-1

SUSE-SU-2025:20270-1

SUSE-SU-2025_0847-1

SUSE-SU-2025_0856-1

SUSE-SU-2025_0955-1

SUSE-SU-2025_1293-1

USN-7510-1

USN-7510-2

USN-7510-3

USN-7510-4

USN-7510-5

USN-7510-6

USN-7510-7

USN-7510-8

USN-7511-1

USN-7511-2

USN-7511-3

USN-7512-1

USN-7521-1

USN-7521-2

USN-7521-3

USN-7593-1

USN-7602-1

USN-7651-1

USN-7651-2

USN-7651-3

USN-7651-4

USN-7651-5

USN-7651-6

USN-7652-1

USN-7653-1

USN-7737-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 2065

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21802.json · Exploit
• https://ubuntu.com/security/CVE-2024-57997 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55916 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50306 · Security Note
• https://ubuntu.com/security/notices/USN-7651-6 · Vendor Advisory
• https://git.kernel.org/stable/c/e876522659012ef2e73834a0b9f1cbe3f74d5fad · Patch
• https://ubuntu.com/security/CVE-2025-21871 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37798 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7593-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21864 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21791 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-57935 · Security Note
• https://ubuntu.com/security/CVE-2024-50157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46821 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21820 · Vendor Advisory