Use-After-Free Vulnerability in Linux Kernel Affecting Multiple Cryptographic Operations
CVE-2025-21726
What is CVE-2025-21726?
An issue within the Linux kernel related to padata can lead to a Use-After-Free scenario during the processing of cryptographic requests. The flaw arises in the handling of reorder_work while processing queued requests, which may allow an attacker to exploit this condition, potentially leading to arbitrary code execution. After an update, it’s crucial to ensure that references are properly managed to avoid releasing memory too early. This vulnerability underscores the importance of maintaining up-to-date kernel versions to mitigate risks associated with cryptographic operations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux bbefa1dd6a6d53537c11624752219e39959d04fb
Linux bbefa1dd6a6d53537c11624752219e39959d04fb < 4c6209efea2208597dbd3e52dc87a0d1a8f2dbe1
Linux bbefa1dd6a6d53537c11624752219e39959d04fb < 7000507bb0d2ceb545c0a690e0c707c897d102c2
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved