CVE-2025-21929

Summary

CVE-2025-21929: A use-after-free vulnerability has been identified and addressed in the Linux kernel's `intel-ish-hid` driver. During the `rmmod` operation for this driver, a use-after-free issue can occur in the `hid_ishtp_cl_remove()` function due to the order of function calls, with `hid_ishtp_cl_deinit()` being called before `ishtp_hid_remove()`. This can result in attempting to access freed memory or resources during the removal process. The call trace indicates that the issue is related to the `ishtp_cl_send()` function in the `intel_ishtp` driver and affects the HID level power off and ISHTP level disconnect processes. This vulnerability has been resolved by reordering the calls in `hid_ishtp_cl_remove()`, ensuring that `ishtp_hid_remove()` is now called before `hid_ishtp_cl_deinit()`.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.