Linux Kernel Vulnerability Affecting Device Removal Process

CVE-2025-39896

What is CVE-2025-39896?

A vulnerability in the Linux kernel impacts how recovery work is handled during device removal, specifically with the ivpu driver. Previously, the system could queue recovery work even after initiating the removal of a device, which posed risks of use-after-free issues when recovery attempted to access already freed resources. The fix involves the implementation of disable_work_sync() instead of cancel_work_sync(), effectively preventing new recovery work items from being scheduled during the device removal phase. Additionally, the function ivpu_pm_cancel_recovery() has been renamed to ivpu_pm_disable_recovery() to better describe its modified behavior after the adjustments.

References