In the Linux kernel, the following vulnerability has been resolved:
um: virtiouml: Fix use-after-free after putdevice in probe
When registervirtiodevice() fails in virtioumlprobe(), the code sets vu_dev->registered = 1 even though the device was not successfully registered. This can lead to use-after-free or other issues.
[
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@14c231959a16ca41bfdcaede72483362a8c645d7",
"id": "CVE-2025-39951-13a5a32c",
"signature_version": "v1",
"target": {
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"107413737715174916760593689460440850823",
"267077188792789517778664331099454042436",
"255285548486724284387554962649241820711",
"61037720828035068501585376313263951120",
"232902792761014769858091008328008042581",
"19012933491905526180524580645478331870",
"133164151839799762904627697519615111408"
]
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaf900a83508c8cd5cdf765e7749f9076196ec7f",
"id": "CVE-2025-39951-1ff27ead",
"signature_version": "v1",
"target": {
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"109794253921313251962437110952362873875",
"276245806437486389278209689741208439435",
"255285548486724284387554962649241820711",
"61037720828035068501585376313263951120",
"232902792761014769858091008328008042581",
"19012933491905526180524580645478331870",
"133164151839799762904627697519615111408"
]
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2ff91255e0157b356cff115d8dc3eeb5162edf2",
"id": "CVE-2025-39951-689570fa",
"signature_version": "v1",
"target": {
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"109794253921313251962437110952362873875",
"276245806437486389278209689741208439435",
"255285548486724284387554962649241820711",
"61037720828035068501585376313263951120",
"232902792761014769858091008328008042581",
"19012933491905526180524580645478331870",
"133164151839799762904627697519615111408"
]
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@aaf900a83508c8cd5cdf765e7749f9076196ec7f",
"id": "CVE-2025-39951-82d3ca09",
"signature_version": "v1",
"target": {
"function": "virtio_uml_probe",
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "319119972545919928944732401765987653837",
"length": 1108.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c2ff91255e0157b356cff115d8dc3eeb5162edf2",
"id": "CVE-2025-39951-8f4d7a83",
"signature_version": "v1",
"target": {
"function": "virtio_uml_probe",
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "109925205911796458904098907517602941912",
"length": 1136.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e94e44c9cb30d7a383d8ac227f24a8c9326b770",
"id": "CVE-2025-39951-93a1cd57",
"signature_version": "v1",
"target": {
"function": "virtio_uml_probe",
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "319119972545919928944732401765987653837",
"length": 1108.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5e94e44c9cb30d7a383d8ac227f24a8c9326b770",
"id": "CVE-2025-39951-a248c918",
"signature_version": "v1",
"target": {
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"109794253921313251962437110952362873875",
"276245806437486389278209689741208439435",
"255285548486724284387554962649241820711",
"61037720828035068501585376313263951120",
"232902792761014769858091008328008042581",
"19012933491905526180524580645478331870",
"133164151839799762904627697519615111408"
]
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@14c231959a16ca41bfdcaede72483362a8c645d7",
"id": "CVE-2025-39951-bcc44dde",
"signature_version": "v1",
"target": {
"function": "virtio_uml_probe",
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "328434714735863672322330969458370535024",
"length": 984.0
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f364023ddcfe83f7073b973a9cb98584b7f2a46",
"id": "CVE-2025-39951-c9d89976",
"signature_version": "v1",
"target": {
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"109794253921313251962437110952362873875",
"276245806437486389278209689741208439435",
"255285548486724284387554962649241820711",
"61037720828035068501585376313263951120",
"232902792761014769858091008328008042581",
"19012933491905526180524580645478331870",
"133164151839799762904627697519615111408"
]
}
},
{
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4f364023ddcfe83f7073b973a9cb98584b7f2a46",
"id": "CVE-2025-39951-fa94c1a0",
"signature_version": "v1",
"target": {
"function": "virtio_uml_probe",
"file": "arch/um/drivers/virtio_uml.c"
},
"signature_type": "Function",
"digest": {
"function_hash": "319119972545919928944732401765987653837",
"length": 1108.0
}
}
]