CVE-2025-39711— Linux kernel 安全漏洞
可能的 ATT&CK 技术 1AI
T1499 · Endpoint Denial of Service影响版本矩阵 10
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 29006e196a5661d9afc8152fa2bf8a5347ac17b4< 3c0e4cc4f55f9a1db2a761e4ffb27c9594245888 | affected |
29006e196a5661d9afc8152fa2bf8a5347ac17b4< 639f5b33fcd7c59157f29b09f6f2866eacf9279c | affected | ||
29006e196a5661d9afc8152fa2bf8a5347ac17b4< 1dfe73394dcfc9b049c8da0dc181c45f156a5f49 | affected | ||
29006e196a5661d9afc8152fa2bf8a5347ac17b4< 0c92c49fc688cfadacc47ae99b06a31237702e9e | affected | ||
6.6 | affected | ||
< 6.6 | unaffected | ||
6.6.103≤ 6.6.* | unaffected | ||
6.12.44≤ 6.12.* | unaffected | ||
| … +2 条更多 | |||
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2025-39711 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗ 尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls Both the ACE and CSI driver are missing a mei_cldev_disable() call in their remove() function. This causes the mei_cl client to stay part of the mei_device->file_list list even though its memory is freed by mei_cl_bus_dev_release() calling kfree(cldev->cl). This leads to a use-after-free when mei_vsc_remove() runs mei_stop() which first removes all mei bus devices calling mei_ace_remove() and mei_csi_remove() followed by mei_cl_bus_dev_release() and then calls mei_cl_all_disconnect() which walks over mei_device->file_list dereferecing the just freed cldev->cl. And mei_vsc_remove() it self is run at shutdown because of the platform_device_unregister(tp->pdev) in vsc_tp_shutdown() When building a kernel with KASAN this leads to the following KASAN report: [ 106.634504] ================================================================== [ 106.634623] BUG: KASAN: slab-use-after-free in mei_cl_set_disconnected (drivers/misc/mei/client.c:783) mei [ 106.634683] Read of size 4 at addr ffff88819cb62018 by task systemd-shutdow/1 [ 106.634729] [ 106.634767] Tainted: [E]=UNSIGNED_MODULE [ 106.634770] Hardware name: Dell Inc. XPS 16 9640/09CK4V, BIOS 1.12.0 02/10/2025 [ 106.634773] Call Trace: [ 106.634777] <TASK> ... [ 106.634871] kasan_report (mm/kasan/report.c:221 mm/kasan/report.c:636) [ 106.634901] mei_cl_set_disconnected (drivers/misc/mei/client.c:783) mei [ 106.634921] mei_cl_all_disconnect (drivers/misc/mei/client.c:2165 (discriminator 4)) mei [ 106.634941] mei_reset (drivers/misc/mei/init.c:163) mei ... [ 106.635042] mei_stop (drivers/misc/mei/init.c:348) mei [ 106.635062] mei_vsc_remove (drivers/misc/mei/mei_dev.h:784 drivers/misc/mei/platform-vsc.c:393) mei_vsc [ 106.635066] platform_remove (drivers/base/platform.c:1424) Add the missing mei_cldev_disable() calls so that the mei_cl gets removed from mei_device->file_list before it is freed to fix this.
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缺少mei_cldev_disable调用，可能导致释放后重用。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2025-39711 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2025-39711 的情报信息
请登录查看更多情报信息。
同批安全公告 · Linux · 2025-09-05 · 共 60 条
| CVE-2025-39706 | Linux kernel 安全漏洞 | |
| CVE-2025-39725 | Linux kernel 安全漏洞 | |
| CVE-2025-39722 | Linux kernel 安全漏洞 | |
| CVE-2025-39721 | Linux kernel 安全漏洞 | |
| CVE-2025-39720 | Linux kernel 安全漏洞 | |
| CVE-2025-39723 | Linux kernel 安全漏洞 | |
| CVE-2025-39710 | Linux kernel 安全漏洞 | |
| CVE-2025-39709 | Linux kernel 安全漏洞 | |
| CVE-2025-39708 | Linux kernel 安全漏洞 | |
| CVE-2025-39707 | Linux kernel 安全漏洞 | |
| CVE-2025-39712 | Linux kernel 安全漏洞 | |
| CVE-2025-39705 | Linux kernel 安全漏洞 | |
| CVE-2025-39704 | Linux kernel 安全漏洞 | |
| CVE-2025-39703 | Linux kernel 安全漏洞 | |
| CVE-2025-39702 | Linux kernel 安全漏洞 | |
| CVE-2025-39701 | Linux kernel 安全漏洞 | |
| CVE-2025-39700 | Linux kernel 安全漏洞 | |
| CVE-2025-39699 | Linux kernel 安全漏洞 | |
| CVE-2025-39698 | Linux kernel 安全漏洞 | |
| CVE-2025-39697 | Linux kernel 安全漏洞 |
显示前 20 条，共 60 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-39711
暂无评论