Use-After-Free Vulnerability in Linux Kernel's AF_UNIX Implementation

CVE-2025-38236

What is CVE-2025-38236?

A use-after-free vulnerability has been identified in the Linux kernel's AF_UNIX implementation, specifically affecting the unix_stream_read_generic() function. This issue arises when socket communication is improperly handled, leading to potential exploitation during message receiving sequences. The vulnerability occurs when an Out-of-Band (OOB) data packet is consumed and additional OOB data packets are processed without appropriate memory management, causing an illegal memory read. This situation can lead to instability or unexpected behavior within applications using AF_UNIX sockets, highlighting the need for timely updates and security patches.

References