Double Free Vulnerability in Linux Kernel exfat Module

CVE-2025-38206

What is CVE-2025-38206?

A double free vulnerability exists in the exfat module of the Linux kernel, specifically during the process of handling upcase tables. This issue occurs when the exfat_create_upcase_table function encounters an error, subsequently leading to a double free condition during memory cleanup operations within exfat_kill_sb. This could result in memory corruption and potential exploitation. The vulnerability is mitigated by setting the pointer to NULL after it has been freed, preventing further access to the deallocated memory segment.

References