CVE-2024-42280 mISDN: Fix a use after free in hfcmulti_tx()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Addresses Vulnerabilities in mISDN: CVE-2024-42280 and CVE-2025-39833 Microsoft has published information on two vulnerabilities affecting the mISDN driver. CVE-2024-42280 addresses a use-after-free issue in hfcmulti_tx(), while CVE-2025-39833 resolves a warning related to deleting an uninitialized timer. Both vulnerabilities could impact systems utilizing the mISDN framework. 2 sources 39