CVE-2025-21802
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
In the Linux kernel's HNS3 network driver, a vulnerability was found causing an Oops when unloading hclge and hns3 drivers in parallel. The issue occurs when hclge unload tries to disable SR-IOV for ae_dev nodes while hns3 unload removes those nodes, leading to memory corruption.
Risk Assessment
The risk involves potential system hang or kernel crash during network driver unload operations, which can disrupt network services and require server reboot.
Recommendation
Immediately update the Linux kernel to a version containing the fix (commit introducing a new mutex to protect the unload process). Avoid parallel unloading of hclge and hns3 drivers until the patch is applied.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling When unload hclge driver, it tries to disable sriov first for each ae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at the time, because it removes all the ae_dev nodes, and it may cause oops. But we can't simply use hnae3_common_lock for this. Because in the process flow of pci_disable_sriov(), it will trigger the remove flow of VF, which will also take hnae3_common_lock. To fixes it, introduce a new mutex to protect the unload process.