Use-After-Free Vulnerability in Linux Kernel NFS Service

CVE-2025-21796

Summary

A use-after-free vulnerability exists within the NFS service of the Linux kernel. When the release function is called for acl_access and acl_default, an incorrect reference state can persist if the acl_default release process fails. This mismatch can lead to a scenario where acl_access retains a dangling pointer to a released memory object, resulting in a warning and potential kernel panic. The vulnerability can compromise the stability and security of systems running the affected kernel versions.

References