CVE-2025-39951

Published: Oct 4, 2025Modified: Oct 19, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: um: virtio_uml: Fix use-after-free after put_device in probe When register_virtio_device() fails in virtio_uml_probe(), the code sets vu_dev->registered = 1 even though the device was not successfully registered. This can lead to use-after-free or other issues.

Affected (12)

Products: Linux: Linux Kernel

Linux

1 product

Linux Kernel

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	5.11 ≤ version < 5.15.194
Linux Linux Kernel	5.16 ≤ version < 6.1.154
Linux Linux Kernel	5.5 ≤ version < 5.10.245
Linux Linux Kernel	6.13 ≤ version < 6.16.9
Linux Linux Kernel	6.2 ≤ version < 6.6.108
Linux Linux Kernel	6.7 ≤ version < 6.12.49
Linux Linux Kernel	Version 6.17 rc1
Linux Linux Kernel	Version 6.17 rc2
Linux Linux Kernel	Version 6.17 rc3
Linux Linux Kernel	Version 6.17 rc4
Linux Linux Kernel	Version 6.17 rc5
Linux Linux Kernel	Version 6.17 rc6