Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-21917— usb: renesas_usbhs: Flush the notify_hotplug_work

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未刷新notify_hotplug_work。

AI Predicted 3.3 Difficulty: Moderate EPSS 0.25% · P15

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux bc57381e634782009b1cb2e86b18013699ada576< 4cd847a7b630a85493d0294ad9542c21aafaa246 affected
bc57381e634782009b1cb2e86b18013699ada576< 394965f90454d6f00fe11879142b720c6c1a872e affected
bc57381e634782009b1cb2e86b18013699ada576< 3248c1f833f924246cb98ce7da4569133c1b2292 affected
bc57381e634782009b1cb2e86b18013699ada576< 4ca078084cdd5f32d533311d6a0b63a60dcadd41 affected
bc57381e634782009b1cb2e86b18013699ada576< d50f5c0cd949593eb9a3d822b34d7b50046a06b7 affected
bc57381e634782009b1cb2e86b18013699ada576< e5aac1c9b2974636db7ce796ffa6de88fa08335e affected
bc57381e634782009b1cb2e86b18013699ada576< 830818c8e70c0364e377f0c243b28061ef7967eb affected
bc57381e634782009b1cb2e86b18013699ada576< 552ca6b87e3778f3dd5b87842f95138162e16c82 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-21917

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
usb: renesas_usbhs: Flush the notify_hotplug_work
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: Flush the notify_hotplug_work When performing continuous unbind/bind operations on the USB drivers available on the Renesas RZ/G2L SoC, a kernel crash with the message "Unable to handle kernel NULL pointer dereference at virtual address" may occur. This issue points to the usbhsc_notify_hotplug() function. Flush the delayed work to avoid its execution when driver resources are unavailable.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未刷新notify_hotplug_work。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux bc57381e634782009b1cb2e86b18013699ada576 ~ 4cd847a7b630a85493d0294ad9542c21aafaa246 -
Linux Linux 3.0 -

II. Public POCs for CVE-2025-21917

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-21917

请登录查看更多情报信息。

Patches & Fixes for CVE-2025-21917 (1)

Same Patch Batch · Linux · 2025-04-01 · 93 CVEs total

CVE-2025-21927 9.8 CRITICAL nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
CVE-2025-21954 9.8 CRITICAL netmem: prevent TX of unreadable skbs
CVE-2025-21969 8.8 HIGH Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
CVE-2025-21955 8.8 HIGH ksmbd: prevent connection release during oplock break notification
CVE-2025-21972 8.8 HIGH net: mctp: unshare packets when reassembling
CVE-2025-21946 8.8 HIGH ksmbd: fix out-of-bounds in parse_sec_desc()
CVE-2025-21945 8.8 HIGH ksmbd: fix use-after-free in smb2_lock
CVE-2025-21967 8.8 HIGH ksmbd: fix use-after-free in ksmbd_free_work_struct
CVE-2025-21947 8.1 HIGH ksmbd: fix type confusion via race condition when using ipc_msg_send_request
CVE-2025-21923 7.8 HIGH HID: hid-steam: Fix use-after-free when detaching device
CVE-2025-21934 7.8 HIGH rapidio: fix an API misues when rio_add_net() fails
CVE-2025-21949 7.8 HIGH LoongArch: Set hugetlb mmap base address aligned with pmd size
CVE-2025-21939 7.8 HIGH drm/xe/hmm: Don't dereference struct page pointers without notifier lock
CVE-2025-21914 7.8 HIGH slimbus: messaging: Free transaction ID in delayed interrupt scenario
CVE-2025-21924 7.8 HIGH net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an e
CVE-2025-21958 7.8 HIGH Revert "openvswitch: switch to per-action label counting in conntrack"
CVE-2025-21965 7.8 HIGH sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()
CVE-2025-21926 7.8 HIGH net: gso: fix ownership in __udp_gso_segment
CVE-2025-21919 7.8 HIGH sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
CVE-2025-21985 7.8 HIGH drm/amd/display: Fix out-of-bound accesses

Showing top 20 of 93 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux