CVE-2025-21923

A flaw was found in the Linux kernel's hid-steam module. This vulnerability occurs when a hid-steam device is detached, as a timing issue in the cleanup process can lead to a use-after-free condition. A local attacker with low privileges could exploit this flaw. Successful exploitation could result in arbitrary code execution, allowing the attacker to gain full control of the system, or cause a system crash (denial of service).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.