Threats tagged 'ghsa-cmvg-6vcw-642h'

CVE-2025-21715 is a use-after-free (UAF) vulnerability in the Linux kernel's net: davicom driver, specifically in the dm9000_drv_remove function. The issue arises because the netdev private data (dm) is used after the free_netdev() call, which leads to a UAF condition. This flaw has been fixed by reordering the free_netdev() call to the end of the function. The vulnerability was identified through static analysis and is similar to a previously fixed UAF in the qcom/emac driver.