CVE-2025-21923

Summary

CVE-2025-21923 is a vulnerability affecting the Linux kernel. In the hid-steam driver, a use-after-free issue was discovered. When a hid-steam device is removed, the client_hdev used for intercepting hidraw access must be properly cleaned up. However, if the deferred work to reattach the input device is scheduled before the client_hdev is cleaned up, it can get rescheduled, leading to a use-after-free condition. This patch fixes the ordering to ensure that the deferred work is properly canceled before the client_hdev is freed, addressing this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.