cve/2025/CVE-2025-21715.md
2025-09-29 21:09:30 +02:00

1.9 KiB

CVE-2025-21715

Description

In the Linux kernel, the following vulnerability has been resolved:net: davicom: fix UAF in dm9000_drv_removedm is netdev private data and it cannot beused after free_netdev() call. Using dm after free_netdev()can cause UAF bug. Fix it by moving free_netdev() at the end of thefunction.This is similar to the issue fixed in commitad297cd2db89 ("net: qcom/emac: fix UAF in emac_remove").This bug is detected by our static analysis tool.

POC

Reference

No PoCs from references.

Github