Use-After-Free Vulnerability in Linux Kernel Affecting Multiple Cryptographic Operations

CVE-2025-21726

Summary

An issue within the Linux kernel related to padata can lead to a Use-After-Free scenario during the processing of cryptographic requests. The flaw arises in the handling of reorder_work while processing queued requests, which may allow an attacker to exploit this condition, potentially leading to arbitrary code execution. After an update, it’s crucial to ensure that references are properly managed to avoid releasing memory too early. This vulnerability underscores the importance of maintaining up-to-date kernel versions to mitigate risks associated with cryptographic operations.

References