CVE-2025-21923: HID: hid-steam: Fix use-after-free when detaching device
HID: hid-steam: Fix use-after-free when detaching device
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (hid-steam)to a version that resolves this vulnerability.Patch hid-steam: Fix use-after-free when detaching device
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21923?
CVE-2025-21923 has been assigned a medium severity rating due to the potential for a use-after-free vulnerability leading to unexpected behavior.
How do I fix CVE-2025-21923?
To fix CVE-2025-21923, ensure your Linux Kernel is updated to the latest version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2025-21923?
CVE-2025-21923 affects the Linux Kernel, specifically concerning the hid-steam device driver.
Can CVE-2025-21923 be exploited remotely?
CVE-2025-21923 cannot be exploited remotely as it requires physical access to the system to detach the device.
What are the consequences of CVE-2025-21923 if exploited?
Exploiting CVE-2025-21923 could lead to arbitrary code execution or denial of service due to the use-after-free error.