CVE-2025-39896CWE-416

CVE-2025-39896

High · published October 1, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
3.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Prevent recovery work from being queued during device removal

Use disable_work_sync() instead of cancel_work_sync() in ivpu_dev_fini()

to ensure that no new recovery work items can be queued after device

removal has started. Previously, recovery work could be scheduled even

after canceling existing work, potentially leading to use-after-free

bugs if recovery accessed freed resources.

Rename ivpu_pm_cancel_recovery() to ivpu_pm_disable_recovery() to better

reflect its new behavior.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00150 · 3.9th percentile
Weakness
CWE-416 · Use After Free
Published
2025-10-01T12:15Z
Affected products (6)
ProductVersionsFixed in
linux/linux_kernel≥ 6.8, < 6.12.466.12.46
linux/linux_kernel≥ 6.13, < 6.16.66.16.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 01 OCT 07:42Z
    accel/ivpu: Prevent recovery work from being queued during device removal
    cvelistv5