CVE-2025-39783
BaseFortify
Publication date: 2025-09-11
Last updated on: 2025-11-03
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.1.153-1 |
| linux | linux_kernel | 5.10.244-1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a flaw in the Linux kernel's PCI endpoint function driver code. Specifically, it involves an incorrect use of the list_del() function on a list head field (epf_group) in the pci_epf_remove_cfs() function. This misuse causes a Kernel Address Sanitizer (KASAN) warning due to a use-after-free error when tearing down an endpoint function driver that has a configfs attribute group. Essentially, the kernel attempts to remove a list head as if it were a list entry, leading to memory corruption issues.
How can this vulnerability impact me? :
This vulnerability can lead to memory corruption in the Linux kernel, specifically a use-after-free condition. This can cause system instability, crashes, or potentially allow an attacker with the ability to unload kernel modules to execute arbitrary code or escalate privileges. The impact depends on the environment and whether the vulnerable code path is exercised.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by monitoring for KASAN (Kernel Address Sanitizer) warnings related to slab-use-after-free errors in the pci_epf_remove_cfs function. Specifically, look for kernel logs indicating a BUG: KASAN slab-use-after-free in pci_epf_remove_cfs with messages about list_del() misuse. You can check kernel logs using commands like `dmesg | grep -i kasan` or `journalctl -k | grep -i kasan` to find relevant error messages.
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation is to apply the patch that removes the incorrect list_del() call from the pci_epf_remove_cfs function in the Linux kernel. Until the patch is applied, avoid unloading endpoint function drivers with configfs attribute groups to prevent triggering the use-after-free error. Monitoring and updating to a kernel version that includes this fix is recommended.