CVE-2025-21802

CVE-2025-21802

Medium · published February 28, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
10.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix oops when unload drivers paralleling

When unload hclge driver, it tries to disable sriov first for each

ae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at

the time, because it removes all the ae_dev nodes, and it may cause

oops.

But we can't simply use hnae3_common_lock for this. Because in the

process flow of pci_disable_sriov(), it will trigger the remove flow

of VF, which will also take hnae3_common_lock.

To fixes it, introduce a new mutex to protect the unload process.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.8th percentile
Published
2025-02-28T01:16Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 4.19.214, < 4.204.20
linux/linux_kernel≥ 5.4.156, < 5.55.5
linux/linux_kernel≥ 5.10.76, < 5.10.2355.10.235
linux/linux_kernel≥ 5.14.15, < 5.155.15
linux/linux_kernel≥ 5.15.1, < 5.15.1795.15.179
linux/linux_kernel≥ 5.16, < 6.1.1296.1.129
linux/linux_kernel≥ 6.2, < 6.6.766.6.76
linux/linux_kernel≥ 6.7, < 6.12.136.12.13
linux/linux_kernel≥ 6.13, < 6.13.26.13.2
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (11)
EPSS history
Timeline
  • 27 FEB 20:00Z
    net: hns3: fix oops when unload drivers paralleling
    cvelistv5