Memory Management Vulnerability in Linux Kernel Affecting Device Handling

CVE-2025-39872

What is CVE-2025-39872?

A vulnerability exists in the Linux kernel related to the hsr_get_port_ndev function, which requires proper management of the Read-Copy-Update (RCU) lock and device locking. Failure to hold these locks appropriately can lead to a use-after-free condition in the caller function, potentially allowing unauthorized access to device references. This presents risks to system integrity and can be exploited if not properly mitigated.

References