Slab Use-After-Free Vulnerability in Linux Kernel Affecting RTSX USB Memory Stick Driver

CVE-2025-22020

Summary

A vulnerability in the Linux kernel related to the RTSX USB memory stick driver has been identified, allowing for a slab use-after-free condition during the card polling process. This issue can arise when the driver attempts to remove or detach USB devices improperly, potentially leading to crashes or undefined behavior. The vulnerability has been addressed by ensuring proper memory management in the driver, preventing access to memory that has already been freed. Keeping the kernel updated is essential to mitigate this and similar vulnerabilities.

References