Use After Free and Double Free Vulnerability in Linux Kernel VKMS Driver

CVE-2025-22097

Summary

A vulnerability in the VKMS driver of the Linux kernel can lead to potential security risks during driver initialization failures. When the vkms_exit() function is invoked due to initialization errors, it may access an uninitialized or already freed default_config pointer, possibly resulting in a double free scenario. This issue has been addressed by ensuring that default_config is only initialized if the driver initialization completes successfully, thus mitigating the risks associated with accessing invalid memory.

References