CVE-2025-21802

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-21802
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21802.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-21802
Downstream
Related
Published
2025-02-27T20:00:56.292Z
Modified
2026-03-12T02:18:15.353510Z
Summary
net: hns3: fix oops when unload drivers paralleling
Details

In the Linux kernel, the following vulnerability has been resolved:

net: hns3: fix oops when unload drivers paralleling

When unload hclge driver, it tries to disable sriov first for each aedev node from hnae3aedevlist. If user unloads hns3 driver at the time, because it removes all the ae_dev nodes, and it may cause oops.

But we can't simply use hnae3commonlock for this. Because in the process flow of pcidisablesriov(), it will trigger the remove flow of VF, which will also take hnae3commonlock.

To fixes it, introduce a new mutex to protect the unload process.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21802.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d36b15e3e7b5937cb1f6ac590a85facc3a320642
Fixed
622d92a67656e5c4d2d6ccac02d688ed995418c6
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0dd8a25f355b4df2d41c08df1716340854c7d4c5
Fixed
8c640dd3d900cc8988a39c007591f1deee776df4
Fixed
e876522659012ef2e73834a0b9f1cbe3f74d5fad
Fixed
b5a8bc47aa0a4aa8bca5466dfa2d12dbb5b3cd0c
Fixed
82736bb83fb0221319c85c2e9917d0189cd84e1e
Fixed
cafe9a27e22736d4a01b3933e36225f9857c7988
Fixed
92e5995773774a3e70257e9c95ea03518268bea5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b06ad258e01389ca3ff13bc180f3fcd6a608f1cd
Last affected
c4b64011e458aa2b246cd4e42012cfd83d2d9a5c
Last affected
9b5a29f0acefa3eb1dbe2fa302b393eeff64d933

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21802.json"