CVE-2025-39896
HIGH EPSS 3.5%
Published Oct 1, 20259mo ago · Modified Jun 17, 20261w ago
7.8 CVSS 3.1
Published Oct 1, 2025 9mo ago
Last Modified Jun 17, 2026 1w ago
Description
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery work from being queued during device removal Use disable_work_sync() instead of cancel_work_sync() in ivpu_dev_fini() to ensure that no new recovery work items can be queued after device removal has started. Previously, recovery work could be scheduled even after canceling existing work, potentially leading to use-after-free bugs if recovery accessed freed resources. Rename ivpu_pm_cancel_recovery() to ivpu_pm_disable_recovery() to better reflect its new behavior.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
3.5% percentile
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-416 Use After Free Memory Safety
Affected Products 6
References 3
- git.kernel.org https://git.kernel.org/stable/c/54c49eca38dbd06913a696f6d7610937dcfad226
- git.kernel.org https://git.kernel.org/stable/c/565d2c15b6c36c3250e694f7b9a86229c1787be5
- git.kernel.org https://git.kernel.org/stable/c/69a79ada8eb034ce016b5b78fb7d08d8687223de
Remediation
- git.kernel.org https://git.kernel.org/stable/c/54c49eca38dbd06913a696f6d7610937dcfad226
- git.kernel.org https://git.kernel.org/stable/c/565d2c15b6c36c3250e694f7b9a86229c1787be5
- git.kernel.org https://git.kernel.org/stable/c/69a79ada8eb034ce016b5b78fb7d08d8687223de