CVE-2025-21928: HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
Published Apr 1, 2025
·Updated
HID: intel-ish-hid: Fix use-after-free issue in ishtphidremove()
Affected Software
14 affected componentsFixes available
Linux Linux kernel
Linux Linux kernel>=4.9<5.4.291
Linux Linux kernel>=5.5<5.10.235
Linux Linux kernel>=5.11<5.15.179
Linux Linux kernel>=5.16<6.1.131
Linux Linux kernel>=6.2<6.6.83
Linux Linux kernel>=6.7<6.12.19
Linux Linux kernel>=6.13<6.13.7
Linux Linux kernel=6.14-rc1
Linux Linux kernel=6.14-rc2
Linux Linux kernel=6.14-rc3
Linux Linux kernel=6.14-rc4
Linux Linux kernel=6.14-rc5
debian/linux
6.1.176-16.1.190-16.12.107-16.12.115-27.2.12-17.2.15-1
Event History
Apr 1, 2025
CVE Published
via MITRE·03:40 PM
Data Sourced
via MITRE·03:40 PM
Description
Data Sourced
via Red Hat·04:01 PM
DescriptionSeverityAffected Software
Data Sourced
via NVD·04:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
May 5, 2025
Data Sourced
via Microsoft·07:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-21928?
CVE-2025-21928 is considered a medium severity vulnerability due to potential system crashes.
2
How do I fix CVE-2025-21928?
To fix CVE-2025-21928, ensure that you update your Linux kernel to the latest version that contains the patch.
3
What systems are affected by CVE-2025-21928?
CVE-2025-21928 affects various distributions of the Linux kernel that use the intel-ish-hid driver.
4
What type of vulnerability is CVE-2025-21928?
CVE-2025-21928 is a use-after-free vulnerability related to the improper handling of memory in the Linux kernel.
5
What happens if CVE-2025-21928 is exploited?
Exploiting CVE-2025-21928 may lead to a random system crash, impacting the stability of the affected Linux environments.