Use-After-Free Vulnerability in Linux Kernel Proc Handling

CVE-2025-38653

What is CVE-2025-38653?

A vulnerability in the Linux kernel's proc handling mechanism has been identified, where improper handling of proc_lseek can lead to potential Use-After-Free (UAF) conditions during module removal. This issue arises from inadequate checks in the proc_reg_open() function, resulting in a risk during the removal of kernel modules. It has been addressed based on recommendations for securing the related functionalities, enhancing the stability and security of the Linux kernel.

References