{ "dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": { "cveId": "CVE-2025-21715", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-12-29T08:45:45.752Z", "datePublished": "2025-02-27T02:07:26.174Z", "dateUpdated": "2026-05-23T15:56:59.143Z" }, "containers": { "cna": { "providerMetadata": { "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-23T15:56:59.143Z" }, "descriptions": [ { "lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: davicom: fix UAF in dm9000_drv_remove\n\ndm is netdev private data and it cannot be\nused after free_netdev() call. Using dm after free_netdev()\ncan cause UAF bug. Fix it by moving free_netdev() at the end of the\nfunction.\n\nThis is similar to the issue fixed in commit\nad297cd2db89 (\"net: qcom/emac: fix UAF in emac_remove\").\n\nThis bug is detected by our static analysis tool." } ], "affected": [ { "product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/net/ethernet/davicom/dm9000.c" ], "versions": [ { "version": "d28e783c20033b90a64d4e1307bafb56085d8184", "lessThan": "db79e982c5f9e39ab710cbce55b05f2f5e6f1ca9", "status": "affected", "versionType": "git" }, { "version": "4fd0654b8f2129b68203974ddee15f804ec011c2", "lessThan": "a53cb72043443ac787ec0b5fa17bb3f8ff3d462b", "status": "affected", "versionType": "git" }, { "version": "cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b", "lessThan": "7d7d201eb3b766abe590ac0dda7a508b7db3e357", "status": "affected", "versionType": "git" }, { "version": "cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b", "lessThan": "c94ab07edc2843e2f3d46dbd82e5c681503aaadf", "status": "affected", "versionType": "git" }, { "version": "cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b", "lessThan": "c411f9a5fdc9158e8f7c57eac961d3df3eb4d8ca", "status": "affected", "versionType": "git" }, { "version": "cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b", "lessThan": "5a54367a7c2378c65aaa4d3cfd952f26adef7aa7", "status": "affected", "versionType": "git" }, { "version": "cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b", "lessThan": "2013c95df6752d9c88221d0f0f37b6f197969390", "status": "affected", "versionType": "git" }, { "version": "cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b", "lessThan": "19e65c45a1507a1a2926649d2db3583ed9d55fd9", "status": "affected", "versionType": "git" }, { "version": "d182994b2b6e23778b146a230efac8f1d77a3445", "status": "affected", "versionType": "git" }, { "version": "427b3fc3d5244fef9c1f910a9c699f2690642f83", "status": "affected", "versionType": "git" }, { "version": "9c49181c201d434186ca6b1a7b52e29f4169f6f8", "status": "affected", "versionType": "git" }, { "version": "9808f032c4d971cbf2b01411a0a2a8ee0040efe3", "status": "affected", "versionType": "git" }, { "version": "a1f308089257616cdb91b4334c5eaa81ae17e387", "status": "affected", "versionType": "git" }, { "version": "5.4.106", "lessThan": "5.4.291", "status": "affected", "versionType": "semver" }, { "version": "5.10.24", "lessThan": "5.10.235", "status": "affected", "versionType": "semver" }, { "version": "4.4.262", "lessThan": "4.5", "status": "affected", "versionType": "semver" }, { "version": "4.9.262", "lessThan": "4.10", "status": "affected", "versionType": "semver" }, { "version": "4.14.226", "lessThan": "4.15", "status": "affected", "versionType": "semver" }, { "version": "4.19.181", "lessThan": "4.20", "status": "affected", "versionType": "semver" }, { "version": "5.11.7", "lessThan": "5.12", "status": "affected", "versionType": "semver" } ] }, { "product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": [ "drivers/net/ethernet/davicom/dm9000.c" ], "versions": [ { "version": "5.12", "status": "affected" }, { "version": "0", "lessThan": "5.12", "status": "unaffected", "versionType": "semver" }, { "version": "5.4.291", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.10.235", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver" }, { "version": "5.15.179", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.1.129", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.6.76", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.12.13", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.13.2", "lessThanOrEqual": "6.13.*", "status": "unaffected", "versionType": "semver" }, { "version": "6.14", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix" } ] } ], "cpeApplicability": [ { "nodes": [ { "operator": "OR", "negate": false, "cpeMatch": [ { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.4.106", "versionEndExcluding": "5.4.291" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.10.24", "versionEndExcluding": "5.10.235" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "5.15.179" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.1.129" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.6.76" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.12.13" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.13.2" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.12", "versionEndExcluding": "6.14" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.4.262" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.9.262" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.14.226" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.19.181" }, { "vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.11.7" } ] } ] } ], "references": [ { "url": "https://git.kernel.org/stable/c/db79e982c5f9e39ab710cbce55b05f2f5e6f1ca9" }, { "url": "https://git.kernel.org/stable/c/a53cb72043443ac787ec0b5fa17bb3f8ff3d462b" }, { "url": "https://git.kernel.org/stable/c/7d7d201eb3b766abe590ac0dda7a508b7db3e357" }, { "url": "https://git.kernel.org/stable/c/c94ab07edc2843e2f3d46dbd82e5c681503aaadf" }, { "url": "https://git.kernel.org/stable/c/c411f9a5fdc9158e8f7c57eac961d3df3eb4d8ca" }, { "url": "https://git.kernel.org/stable/c/5a54367a7c2378c65aaa4d3cfd952f26adef7aa7" }, { "url": "https://git.kernel.org/stable/c/2013c95df6752d9c88221d0f0f37b6f197969390" }, { "url": "https://git.kernel.org/stable/c/19e65c45a1507a1a2926649d2db3583ed9d55fd9" } ], "title": "net: davicom: fix UAF in dm9000_drv_remove", "x_generator": { "engine": "bippy-1.2.0" } }, "adp": [ { "metrics": [ { "cvssV3_1": { "scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH" } }, { "other": { "type": "ssvc", "content": { "id": "CVE-2025-21715", "role": "CISA Coordinator", "options": [ { "Exploitation": "none" }, { "Automatable": "no" }, { "Technical Impact": "total" } ], "version": "2.0.3", "timestamp": "2025-02-27T17:58:14.582749Z" } } } ], "problemTypes": [ { "descriptions": [ { "lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free" } ] } ], "title": "CISA ADP Vulnrichment", "providerMetadata": { "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-27T18:02:28.224Z" } }, { "title": "CVE Program Container", "references": [ { "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html" } ], "providerMetadata": { "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T19:36:09.373Z" } } ] } }