CVE-2025-21802 - CVE House
Back to Database
Status published Unknown CVE-2025-21802

net: hns3: fix oops when unload drivers paralleling

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling When unload hclge driver, it tries to disable sriov first for each ae_dev node from hnae3_ae_dev_list. If user unloads hns3 driver at the time, because it removes all the ae_dev nodes, and it may cause oops. But we can't simply use hnae3_common_lock for this. Because in the process flow of pci_disable_sriov(), it will trigger the remove flow of VF, which will also take hnae3_common_lock. To fixes it, introduce a new mutex to protect the unload process.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-21802

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
d36b15e3e7b5937cb1f6ac590a85facc3a320642, 0dd8a25f355b4df2d41c08df1716340854c7d4c5, b06ad258e01389ca3ff13bc180f3fcd6a608f1cd, c4b64011e458aa2b246cd4e42012cfd83d2d9a5c, 9b5a29f0acefa3eb1dbe2fa302b393eeff64d933, 5.10.76, 4.19.214, 5.4.156, 5.14.15, 5.15, 0, 5.10.235, 5.15.179, 6.1.129, 6.6.76, 6.12.13, 6.13.2, 6.14

Timeline

Official Publish: February 27th, 2025
Last Modified: July 14th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.