Use-after-free Vulnerability in Intel ISHTP HID Driver for Linux Kernel

CVE-2025-21929

Summary

A use-after-free vulnerability exists in the Intel ISHTP HID driver within the Linux Kernel during the rmmod operation. The issue arises in the function hid_ishtp_cl_remove() when called in a specific order. This can potentially allow an attacker to access freed memory or resources, leading to a range of exploit scenarios. The vulnerability has been mitigated by adjusting the sequence of function calls, ensuring that the HID level power off occurs prior to the ISHTP level disconnection to enhance memory safety.

References