Use-After-Free Vulnerability in Linux Kernel HID Driver by Intel

CVE-2025-21928

Summary

A vulnerability in the Intel HID driver for the Linux kernel can lead to unexpected system crashes shortly after driver removal due to improper memory management. The issue arises in the ishtp_hid_remove() function, where the driver_data is incorrectly freed during the destruction loop of HID devices. This happens because the freed driver_data is accessed in the hid_destroy_device() function when attempting to power off the sensor, resulting in a use-after-free condition. The patch addresses this flaw by temporarily storing driver_data before device destruction, ensuring safe memory access.

References