exploitDog

CVE-2025-39951

Опубликовано: 04 окт. 2025

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved:

um: virtio_uml: Fix use-after-free after put_device in probe

When register_virtio_device() fails in virtio_uml_probe(), the code sets vu_dev->registered = 1 even though the device was not successfully registered. This can lead to use-after-free or other issues.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.5 (включая) до 5.10.245 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.11 (включая) до 5.15.194 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 5.16 (включая) до 6.1.154 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.2 (включая) до 6.6.108 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.7 (включая) до 6.12.49 (исключая)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Версия от 6.13 (включая) до 6.16.9 (исключая)

cpe:2.3:o:linux:linux_kernel:6.17:rc1:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc2:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc3:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc4:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc5:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:6.17:rc6:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00023

Низкий

7.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2025-39951

CVSS3: 7.8

ubuntu

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: um: virtio_uml: Fix use-after-free after put_device in probe When register_virtio_device() fails in virtio_uml_probe(), the code sets vu_dev->registered = 1 even though the device was not successfully registered. This can lead to use-after-free or other issues.

CVE-2025-39951

msrc

4 месяца назад

um: virtio_uml: Fix use-after-free after put_device in probe

CVE-2025-39951

CVSS3: 7.8

debian

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: u ...

GHSA-9fvg-5x6h-m5x2

CVSS3: 7.8

github

4 месяца назад

In the Linux kernel, the following vulnerability has been resolved: um: virtio_uml: Fix use-after-free after put_device in probe When register_virtio_device() fails in virtio_uml_probe(), the code sets vu_dev->registered = 1 even though the device was not successfully registered. This can lead to use-after-free or other issues.

EPSS

Процентиль: 5%

0.00023

Низкий

7.8 High

CVSS3

Дефекты

CWE-416