CVE-2025-39882
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
23/09/2025
Last modified:
23/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
drm/mediatek: fix potential OF node use-after-free<br />
<br />
The for_each_child_of_node() helper drops the reference it takes to each<br />
node as it iterates over children and an explicit of_node_put() is only<br />
needed when exiting the loop early.<br />
<br />
Drop the recently introduced bogus additional reference count decrement<br />
at each iteration that could potentially lead to a use-after-free.