Use-After-Free Vulnerability in Linux Kernel's XFRM Interface

CVE-2025-38500

What is CVE-2025-38500?

The Linux kernel contains a vulnerability in the xfrm interface that can result in a use-after-free condition. This issue arises when the collect_md property is incorrectly handled post-device creation, allowing for the potential of a double free scenario during net namespace teardown. The inadequate enforcement of checks in the changelink function leads to this vulnerability, which could trigger critical errors and unexpected kernel behavior. It's essential for users to apply the latest patches to mitigate any risks associated with this vulnerability.

References