Use-After-Free Vulnerability in Linux Kernel Affecting NBD Configuration
CVE-2025-21731
What is CVE-2025-21731?
A use-after-free vulnerability exists in the Linux Kernel that can be exploited when the NBD (Network Block Device) configuration is unexpectedly released while still in use. This issue arises during the reconfiguration process, leading to potential access to freed memory resources. Proper handling during disconnect operations is essential to maintain the stability and security of NBD connections. The vulnerability is resolved by ensuring that the NBD state is properly managed, preventing the reconfiguration attempt from succeeding post-disconnection. Users are advised to update their Linux Kernel to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Linux b7aa3d39385dc2d95899f9e379623fef446a2acd
Linux b7aa3d39385dc2d95899f9e379623fef446a2acd < 6bef6222a3f6c7adb6396f77f25a3579d821b09a
Linux b7aa3d39385dc2d95899f9e379623fef446a2acd
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved