Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-21715— net: davicom: fix UAF in dm9000_drv_remove

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在资源管理错误漏洞，该漏洞源于dm9000_drv_remove释放后重用。

AI Predicted 4.4 Difficulty: Moderate EPSS 0.24% · P14

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation

Affected Version Matrix 30

VendorProduct Version RangeStatus
Linux Linux d28e783c20033b90a64d4e1307bafb56085d8184< db79e982c5f9e39ab710cbce55b05f2f5e6f1ca9 affected
4fd0654b8f2129b68203974ddee15f804ec011c2< a53cb72043443ac787ec0b5fa17bb3f8ff3d462b affected
cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b< 7d7d201eb3b766abe590ac0dda7a508b7db3e357 affected
cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b< c94ab07edc2843e2f3d46dbd82e5c681503aaadf affected
cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b< c411f9a5fdc9158e8f7c57eac961d3df3eb4d8ca affected
cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b< 5a54367a7c2378c65aaa4d3cfd952f26adef7aa7 affected
cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b< 2013c95df6752d9c88221d0f0f37b6f197969390 affected
cf9e60aa69ae6c40d3e3e4c94dd6c8de31674e9b< 19e65c45a1507a1a2926649d2db3583ed9d55fd9 affected
… +22 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-21715

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
net: davicom: fix UAF in dm9000_drv_remove
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000_drv_remove dm is netdev private data and it cannot be used after free_netdev() call. Using dm after free_netdev() can cause UAF bug. Fix it by moving free_netdev() at the end of the function. This is similar to the issue fixed in commit ad297cd2db89 ("net: qcom/emac: fix UAF in emac_remove"). This bug is detected by our static analysis tool.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 资源管理错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在资源管理错误漏洞，该漏洞源于dm9000_drv_remove释放后重用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux d28e783c20033b90a64d4e1307bafb56085d8184 ~ db79e982c5f9e39ab710cbce55b05f2f5e6f1ca9 -
Linux Linux 5.12 -

II. Public POCs for CVE-2025-21715

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-21715

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-21715 (5)

Other References for CVE-2025-21715 (2)

Same Patch Batch · Linux · 2025-02-27 · 177 CVEs total

CVE-2025-21748 9.8 CRITICAL ksmbd: fix integer overflows on 32 bit systems
CVE-2025-21805 9.8 CRITICAL RDMA/rtrs: Add missing deinit() call
CVE-2025-21796 9.8 CRITICAL nfsd: clear acl_access/acl_default after releasing them
CVE-2025-21707 9.8 CRITICAL mptcp: consolidate suboption status
CVE-2024-58006 9.6 CRITICAL PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar()
CVE-2025-21735 8.8 HIGH NFC: nci: Add bounds checking in nci_hci_create_pipe()
CVE-2024-57999 8.8 HIGH powerpc/pseries/iommu: IOMMU incorrectly marks MMIO range in DDW
CVE-2024-57997 8.8 HIGH wifi: wcn36xx: fix channel survey memory allocation size
CVE-2024-57995 8.8 HIGH wifi: ath12k: fix read pointer after free in ath12k_mac_assign_vif_to_vdev()
CVE-2025-21710 8.2 HIGH tcp: correct handling of extreme memory squeeze
CVE-2024-57973 8.1 HIGH rdma/cxgb4: Prevent potential integer overflow on 32bit
CVE-2025-21766 8.1 HIGH ipv4: use RCU protection in __ip_rt_update_pmtu()
CVE-2025-21765 8.1 HIGH ipv6: use RCU protection in ip6_default_advmss()
CVE-2025-21762 8.1 HIGH arp: use RCU protection in arp_xmit()
CVE-2025-21760 8.1 HIGH ndisc: extend RCU protection in ndisc_send_skb()
CVE-2024-58004 7.8 HIGH media: intel/ipu6: remove cpu latency qos request on error
CVE-2025-21722 7.8 HIGH nilfs2: do not force clear folio if buffer is referenced
CVE-2024-52560 7.8 HIGH fs/ntfs3: Mark inode as bad as soon as error detected in mi_enum_attr()
CVE-2024-58002 7.8 HIGH media: uvcvideo: Remove dangling pointers
CVE-2025-21801 7.8 HIGH net: ravb: Fix missing rtnl lock in suspend/resume path

Showing top 20 of 177 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux