CVE-2025-39951: um: virtio_uml: Fix use-after-free after put_device in probe
In the Linux kernel, the following vulnerability has been resolved:
um: virtiouml: Fix use-after-free after putdevice in probe
When registervirtiodevice() fails in virtioumlprobe(), the code sets vudev->registered = 1 even though the device was not successfully registered. This can lead to use-after-free or other issues.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39951?
CVE-2025-39951 has been classified with a high severity due to its potential for exploitation in the Linux kernel.
How do I fix CVE-2025-39951?
To fix CVE-2025-39951, update your Linux kernel to the latest version where the vulnerability has been patched.
What types of systems are affected by CVE-2025-39951?
CVE-2025-39951 affects systems running specific versions of the Linux kernel that utilize virtio devices.
What is the nature of the vulnerability in CVE-2025-39951?
The vulnerability in CVE-2025-39951 is a use-after-free error that can occur when certain conditions are met during device registration.
What are the potential impacts of exploiting CVE-2025-39951?
Exploiting CVE-2025-39951 could potentially allow an attacker to execute arbitrary code or cause denial of service.