logo_clicknbuy.png

CVE-2025-21715 – “Qualcomm Emac and Davicom DM9000 Linux Kernel UAF Vulnerability”

The following table lists the changes that have been made to the
CVE-2025-21715 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Feb. 27, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    net: davicom: fix UAF in dm9000_drv_remove

    dm is netdev private data and it cannot be
    used after free_netdev() call. Using dm after free_netdev()
    can cause UAF bug. Fix it by moving free_netdev() at the end of the
    function.

    This is similar to the issue fixed in commit
    ad297cd2db89 (“net: qcom/emac: fix UAF in emac_remove”).

    This bug is detected by our static analysis tool.
    Added Reference https://git.kernel.org/stable/c/19e65c45a1507a1a2926649d2db3583ed9d55fd9
    Added Reference https://git.kernel.org/stable/c/2013c95df6752d9c88221d0f0f37b6f197969390
    Added Reference https://git.kernel.org/stable/c/5a54367a7c2378c65aaa4d3cfd952f26adef7aa7
    Added Reference https://git.kernel.org/stable/c/c411f9a5fdc9158e8f7c57eac961d3df3eb4d8ca
    Added Reference https://git.kernel.org/stable/c/c94ab07edc2843e2f3d46dbd82e5c681503aaadf
Share the Post:

Related Posts