In the Linux kernel, the following vulnerability has been resolved:
media: uvcvideo: Fix crash during unbind if gpio unit is in use
We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device.
If we unbind the driver from the usb interface, the cleanup functions are never called. In our case, the IRQ is never disabled.
If an IRQ is triggered, it will try to access memory sections that are already free, causing an OOPS.
We cannot use the function devm_request_threaded_irq here. The devm_* clean functions may be called after the main structure is released by uvc_delete.
Luckily this bug has small impact, as it is only affected by devices with gpio units and the user has to unbind the device, a disconnect will not trigger this error.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 14, 2025 | Mar 6, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 6, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04bUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-virtualUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-gcp-fipsUpgrade linux-image-genericUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-realtimeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-gke-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-intelUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-oracle-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oem-24.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-gkeUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-5.15.0-1089-azure | May 20, 2025 | Mar 6, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 6, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub