Upstream information

CVE-2025-39882 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/mediatek: fix potential OF node use-after-free

The for_each_child_of_node() helper drops the reference it takes to each
node as it iterates over children and an explicit of_node_put() is only
needed when exiting the loop early.

Drop the recently introduced bogus additional reference count decrement
at each iteration that could potentially lead to a use-after-free.

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entry: 1250389 [NEW]

No SUSE Security Announcements cross referenced.

SUSE Timeline for this CVE

CVE page created: Tue Sep 23 14:46:37 2025
CVE page last modified: Tue Sep 23 14:46:37 2025