CVE-2025-39872 | BDVDB-2026-295296 Detail

Description#

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsr_get_port_ndev hsr_get_port_ndev calls hsr_for_each_port, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller function.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-09-23Record published in the CVE List.
2. Version 22026-08-05Most recent update recorded in the CVE List.