Use-After-Free Vulnerability in Linux Kernel's Taprio Module

CVE-2025-38087

What is CVE-2025-38087?

A use-after-free vulnerability has been identified in the Linux Kernel's taprio module, specifically in the taprio_dev_notifier function. This issue occurs due to the absence of protection by an RCU read-side critical section, allowing a potential race condition with the advance_sched function. If exploited, this vulnerability can lead to unpredictable behavior and system instability. The issue has been addressed by incorporating an rcu_read_lock within the taprio_dev_notifier function, which effectively mitigates the risk associated with this flaw.

References