CVE-2025-21928 HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple HID Vulnerabilities Fixed in Recent Microsoft Updates Microsoft has published updates addressing two vulnerabilities in Human Interface Device (HID) drivers. CVE-2025-21923 and CVE-2025-21928, both published on April 1, 2025, involve use-after and use-after-free issues affecting HID devices. Users of affected systems are advised to apply the updates to mitigate potential exploitation. 3 sources 45