Use-After-Free Vulnerability in Linux Kernel Affecting IPC Lookups

CVE-2025-38212

What is CVE-2025-38212?

A use-after-free vulnerability has been identified in the Linux kernel that affects IPCS lookups. When executing the idr_for_each() function, improper access handling may allow freed memory to be read inadvertently. This occurs because the function is not sufficiently protected by RCU read-critical regions. The flaw could lead to inconsistencies and potential exploitation, requiring rigorous code alterations to prevent memory access after it has been freed during operations like shm_destroy_orphaned(). Ensuring these operations are safeguarded within the correct critical periods is crucial for mitigating the risk.

References