CVE-2025-21727 padata: fix UAF in padata_reorder

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in Microsoft Security Updates Microsoft has published information regarding two critical vulnerabilities identified as CVE-2025-21715 and CVE-2025-21727. Both vulnerabilities involve use-after-free (UAF) issues in the dm9000 and padata drivers, respectively, affecting system stability and security. The vulnerabilities were published on February 27, 2025, and have been addressed in recent updates. 5 sources 45