CVE-2025-21802

MediumCVSS 5.5/10Last modified Nov 10, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix oops when unload drivers paralleling

When unload hclge driver, it tries to disable sriov first for each ae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at the time, because it removes all the ae_dev nodes, and it may cause oops.

But we can't simply use hnae3_common_lock for this. Because in the process flow of pci_disable_sriov(), it will trigger the remove flow of VF, which will also take hnae3_common_lock.

To fixes it, introduce a new mutex to protect the unload process.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= d36b15e3e7b5937cb1f6ac590a85facc3a320642, < 622d92a67656e5c4d2d6ccac02d688ed995418c6; >= 0dd8a25f355b4df2d41c08df1716340854c7d4c5, < 8c640dd3d900cc8988a39c007591f1deee776df4; >= 0dd8a25f355b4df2d41c08df1716340854c7d4c5, < e876522659012ef2e73834a0b9f1cbe3f74d5fad; >= 0dd8a25f355b4df2d41c08df1716340854c7d4c5, < b5a8bc47aa0a4aa8bca5466dfa2d12dbb5b3cd0c; >= 0dd8a25f355b4df2d41c08df1716340854c7d4c5, < 82736bb83fb0221319c85c2e9917d0189cd84e1e; >= 0dd8a25f355b4df2d41c08df1716340854c7d4c5, < cafe9a27e22736d4a01b3933e36225f9857c7988; >= 0dd8a25f355b4df2d41c08df1716340854c7d4c5, < 92e5995773774a3e70257e9c95ea03518268bea5; b06ad258e01389ca3ff13bc180f3fcd6a608f1cd; c4b64011e458aa2b246cd4e42012cfd83d2d9a5c; 9b5a29f0acefa3eb1dbe2fa302b393eeff64d933; >= 5.10.76, < 5.10.235; >= 4.19.214, < 4.20; >= 5.4.156, < 5.5; >= 5.14.15, < 5.15
LinuxLinux5.15
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)>= V3.1.7, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.6, < *
SiemensSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)>= V3.1.7, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.6, < *
SiemensSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)>= V3.1.7, < *

References

Timeline

Published
Feb 27, 2025
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-218035.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix warnings during S3 suspend The enable_gpe_wakeup() funcCVE-2025-218045.5In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-ep: Fix incorrect variable used when calling devm_request_memCVE-2025-218055.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is triggered when repeaCVE-2025-218065.5In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero The following problem CVE-2025-218075.5In the Linux kernel, the following vulnerability has been resolved: block: fix queue freeze vs limits lock order in sysfs store methods quCVE-2025-218085.5In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode DevCVE-2025-218095.5In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix peer hash locking vs RCU callback In its address list,CVE-2025-21815.9A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of PrisCVE-2025-218105.5In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API class_dev_iterCVE-2025-218117.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active references nilfs_lookCVE-2025-218127.8In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev->ax25_ptr syzbot found a lockdep issue [1]. We CVE-2025-218135.5In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching