Vulnerability Details CVE-2025-39882
In the Linux kernel, the following vulnerability has been resolved:
drm/mediatek: fix potential OF node use-after-free
The for_each_child_of_node() helper drops the reference it takes to each
node as it iterates over children and an explicit of_node_put() is only
needed when exiting the loop early.
Drop the recently introduced bogus additional reference count decrement
at each iteration that could potentially lead to a use-after-free.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 4.5%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2025-39882
-
cpe:2.3:o:linux:linux_kernel:6.12.45
-
cpe:2.3:o:linux:linux_kernel:6.12.46
-
cpe:2.3:o:linux:linux_kernel:6.12.47
-
cpe:2.3:o:linux:linux_kernel:6.16.5
-
cpe:2.3:o:linux:linux_kernel:6.16.6
-
cpe:2.3:o:linux:linux_kernel:6.16.7
-
cpe:2.3:o:linux:linux_kernel:6.17
-
cpe:2.3:o:linux:linux_kernel:6.6.105
-
cpe:2.3:o:linux:linux_kernel:6.6.106