Use-After-Free Vulnerability in Linux Kernel TIPC Connections

CVE-2025-38464

What is CVE-2025-38464?

The Linux kernel has a vulnerability in TIPC (Transparent Inter-Process Communication) where a use-after-free condition occurs if tipc_conn_close() is invoked after releasing the IDR lock during the netns dismantle process. This flaw allows potential null pointer dereference, which could lead to unstable system behavior. The issue arises because tipc_conn_close() may be executed concurrently by multiple threads without proper reference counting. A fix has been implemented to ensure that references are correctly maintained before and after locking mechanisms, preventing the possibility of operating on invalid memory.

References