CVE-2025-39805: net: macb: fix unregister_netdev call order in macb_remove()

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 5.18affected
  • 8b73fa3ae02b2401960de41b0454c0321377b203 and later · before 7351782f2fc8ac31ced52e3d4e6fa120f819a7abaffected · git
  • 8b73fa3ae02b2401960de41b0454c0321377b203 and later · before 2b9719ccad38dffad7dbdd2f39896f723f9b9011affected · git
  • 8b73fa3ae02b2401960de41b0454c0321377b203 and later · before ff0d3bad32108b57265e5b48f15327549af771d3affected · git
  • 8b73fa3ae02b2401960de41b0454c0321377b203 and later · before 775fe690fd4a3337ad2115de2adb41b227d4dae7affected · git
  • 8b73fa3ae02b2401960de41b0454c0321377b203 and later · before 01b9128c5db1b470575d07b05b67ffa3cb02ebf1affected · git
  • before 5.18not affected · semver
  • 6.1.159 and later · up to and including 6.1.*not affected · semver
  • 6.6.119 and later · up to and including 6.6.*not affected · semver
  • 6.12.45 and later · up to and including 6.12.*not affected · semver

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• linux linux kernel5.18 and later · before 6.12.45
• linux linux kernel6.13 and later · before 6.16.5
• linux linux kernel6.17

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe…KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2023-53333Sep 16, 2025 · netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one
  28Monitor
• ← EarlierCVE-2023-53334Sep 16, 2025 · USB: chipidea: fix memory leak with using debugfs_lookup()
  22Monitor
• Later →CVE-2025-39806Sep 16, 2025 · HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
  28Monitor

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.