Use-After-Free Vulnerability in Linux Kernel Affected by AppleTalk Module

CVE-2025-38666

What is CVE-2025-38666?

A use-after-free vulnerability in the Linux kernel's AppleTalk module has been identified, originating from a race condition during the AARP proxy-probe routine. When the function aarp_proxy_probe_network is called, it acquires a lock and allocates memory for an AARP entry. However, while the lock is released and the process sleeps momentarily, a timer thread can remove and free the same entry, leading to potential exploitation. This mismanagement of memory can result in unauthorized access or manipulation of the underlying data structures, posing a significant risk to system stability and security. The vulnerability has been addressed in subsequent kernel updates.

References