CVE-2025-39872

MEDIUM

Linux Kernel - Use-After-Free in HSR Port Device Handling

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsr_get_port_ndev hsr_get_port_ndev calls hsr_for_each_port, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller function.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/9433ba79c2ec3ec7c9a711748701549339c3438c

Patch

https://git.kernel.org/stable/c/68a6729afd3e8e9a2a32538642ce92b96ccf9b1d

Patch

https://git.kernel.org/stable/c/847748fc66d08a89135a74e29362a66ba4e3ab15

Scores

CVSS v3 5.5

EPSS 0.0013

EPSS Percentile 3.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (13)

linux/Kernel < 6.12.64linux

linux/Kernel 6.13.0 - 6.16.8linux

Linux/Linux < 6.14

Linux/Linux 6.12.63 - 6.12.64

Linux/Linux 6.12.64 - 6.12.*

Linux/Linux 6.14

Linux/Linux 6.16.8 - 6.16.*

Linux/Linux 6.17

Linux/Linux 9c10dd8eed74de9e8adeb820939f8745cd566d4a - 68a6729afd3e8e9a2a32538642ce92b96ccf9b1d

Linux/Linux 9c10dd8eed74de9e8adeb820939f8745cd566d4a - 847748fc66d08a89135a74e29362a66ba4e3ab15

... and 3 more

Published Sep 23, 2025

Tracked Since Feb 18, 2026