Use-After-Free Vulnerability in Linux Kernel Affecting Binder Devices

CVE-2025-38175

What is CVE-2025-38175?

A vulnerability has been identified in the Linux kernel's binder component that can lead to a use-after-free condition in binder devices. This issue arises when certain devices are freed without being properly removed from the binder_devices list, potentially resulting in memory corruption. The vulnerability is triggered during the execution of specific tasks, like device removal and memory allocation. Addressing this issue involves ensuring proper sequence in function calls to prevent unintended memory references and enhance overall system stability.

References