Use-After-Free Vulnerability in CIFS within Linux Kernel

CVE-2025-38051

What is CVE-2025-38051?

A critical use-after-free vulnerability exists in the Common Internet File System (CIFS) implementation within the Linux kernel. This vulnerability arises from a race condition during the directory reading process, which allows access to a buffer that has already been freed. An attacker exploiting this flaw could cause unpredictable behavior, potentially leading to data corruption or execution of arbitrary code. The vulnerability is addressed in newer kernel versions, so users are encouraged to upgrade to mitigate risks associated with this issue.

References