VulnerabilityModified

CVE-2025-39872

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsr_get_port_ndev hsr_get_port_ndev calls hsr_for_each_port, which need to hold rcu lock.

MEDIUM 5.5EPSS 0.15%

Does this matter?

Lower severity and a low EPSS score (0.15%). Track it; it rarely justifies an emergency change on its own.

Description

In the Linux kernel, the following vulnerability has been resolved: hsr: hold rcu and dev lock for hsr_get_port_ndev hsr_get_port_ndev calls hsr_for_each_port, which need to hold rcu lock. On the other hand, before return the port device, we need to hold the device reference to avoid UaF in the caller function.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.15% probability · 5th percentile
CISA KEV: Not listed
Affected: linux/linux kernel
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

References

https://git.kernel.org/stable/c/68a6729afd3e8e9a2a32538642ce92b96ccf9b1dPatch
https://git.kernel.org/stable/c/847748fc66d08a89135a74e29362a66ba4e3ab15Patch
https://git.kernel.org/stable/c/9433ba79c2ec3ec7c9a711748701549339c3438c

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.