CVE-2025-21802
Description
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling When unload hclge driver, it tries to disable sriov first for each ae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at the time, because it removes all the ae_dev nodes, and it may cause oops. But we can't simply use hnae3_common_lock for this. Because in the process flow of pci_disable_sriov(), it will trigger the remove flow of VF, which will also take hnae3_common_lock. To fixes it, introduce a new mutex to protect the unload process.
How to fix
- linux linux_kernel4.20, 5.5, 5.10.235, 5.15, 5.15.179, 6.1.129, 6.6.76, 6.12.13, 6.13.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.19.214 ≤ v < 4.20, 5.4.156 ≤ v < 5.5, 5.10.76 ≤ v < 5.10.235, 5.14.15 ≤ v < 5.15, 5.15.1 ≤ v < 5.15.179, 5.16 ≤ v < 6.1.129, 6.2 ≤ v < 6.6.76, 6.7 ≤ v < 6.12.13, 6.13 ≤ v < 6.13.2, 5.15 | 4.20, 5.5, 5.10.235, 5.15, 5.15.179, 6.1.129, 6.6.76, 6.12.13, 6.13.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.