CVE-2025-21856

HIGH EPSS 10.8%
Published Mar 12, 20251y ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
High
Find Similar
Published Mar 12, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release() in /drivers/base/core.c, a device without a release function is a broken device and must be fixed. The current code directly frees the device after calling device_add() without waiting for other kernel parts to release their references. Thus, a reference could still be held to a struct device, e.g., by sysfs, leading to potential use-after-free issues if a proper release function is not set.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
10.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 6

VendorProductVersionRange
linuxlinux_kernel*≥6.3  –  <6.6.80
linuxlinux_kernel*≥6.7  –  <6.12.17
linuxlinux_kernel*≥6.13  –  <6.13.5
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/0505ff2936f166405d81d0d454a81d9c14124344
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/915e34d5ad35a6a9e56113f852ade4a730fb88f0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/940d15254d2216b585558bcf36312da50074e711
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e26e8ac27351f457091459a0a355bacd06d5bb2b
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0505ff2936f166405d81d0d454a81d9c14124344
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/915e34d5ad35a6a9e56113f852ade4a730fb88f0
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/940d15254d2216b585558bcf36312da50074e711
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e26e8ac27351f457091459a0a355bacd06d5bb2b
    Patch