CVE - CVE-2025-21856

CVE-ID
CVE-2025-21856	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: s390/ism: add release function for struct device According to device_release() in /drivers/base/core.c, a device without a release function is a broken device and must be fixed. The current code directly frees the device after calling device_add() without waiting for other kernel parts to release their references. Thus, a reference could still be held to a struct device, e.g., by sysfs, leading to potential use-after-free issues if a proper release function is not set.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/0505ff2936f166405d81d0d454a81d9c14124344 URL:https://git.kernel.org/stable/c/0505ff2936f166405d81d0d454a81d9c14124344 MISC:https://git.kernel.org/stable/c/915e34d5ad35a6a9e56113f852ade4a730fb88f0 URL:https://git.kernel.org/stable/c/915e34d5ad35a6a9e56113f852ade4a730fb88f0 MISC:https://git.kernel.org/stable/c/940d15254d2216b585558bcf36312da50074e711 URL:https://git.kernel.org/stable/c/940d15254d2216b585558bcf36312da50074e711 MISC:https://git.kernel.org/stable/c/e26e8ac27351f457091459a0a355bacd06d5bb2b URL:https://git.kernel.org/stable/c/e26e8ac27351f457091459a0a355bacd06d5bb2b
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)