DEBIAN-CVE-2025-21715

In the Linux kernel, the following vulnerability has been resolved: net: davicom: fix UAF in dm9000drvremove dm is netdev private data and it cannot be used after freenetdev call. Using dm after freenetdev can cause UAF bug. Fix it by moving freenetdev at the end of the function. This is similar ...

CVE-2025-21715

The Linux kernel is affected by a Use-after-Free (UAF) vulnerability in the net: davicom component, specifically within the dm9000_drv_remove function. The issue occurs because dm is private data for netdev and cannot be accessed after the free_netdev() call is executed. The vulnerability can be ...