Dynamic Memory Allocation Vulnerability in Linux Kernel

CVE-2025-38076

What is CVE-2025-38076?

A vulnerability in the Linux kernel allows for a use-after-free (UAF) condition when dynamically allocated percpu counters for module tags are accessed after the module has been unloaded. This occurs because while the module checks for active tags before being unloaded, the associated percpu counters are freed by the free_module() function. If any of these percpu counters are accessed after the module unloads, it can lead to unpredictable behavior or system instability. The resolution involves dynamically allocating percpu counters, ensuring they remain available for any in-use tags post module unloading, thus enhancing memory management and system security.

References