CVE-2025-39951

In the Linux kernel, the following vulnerability has been resolved:

um: virtio_uml: Fix use-after-free after put_device in probe

When register_virtio_device() fails in virtio_uml_probe(), the code sets vu_dev->registered = 1 even though the device was not successfully registered. This can lead to use-after-free or other issues.

This flaw poses no risk to Red Hat Enterprise Linux because it resides exclusively within the User-Mode Linux (UML) architecture, which is not compiled or supported in Red Hat kernel builds. The underlying issue occurs in UML-specific virtio device initialization, a subsystem absent from standard hardware architectures. Because the affected drivers are completely omitted from shipped kernels, Red Hat enterprise products are not vulnerable.