Use-After-Free Vulnerability in Linux Kernel Affected by AppleTalk Module

CVE-2025-38666

What is CVE-2025-38666?

A use-after-free vulnerability in the Linux kernel's AppleTalk module has been identified, originating from a race condition during the AARP proxy-probe routine. When the function aarp_proxy_probe_network is called, it acquires a lock and allocates memory for an AARP entry. However, while the lock is released and the process sleeps momentarily, a timer thread can remove and free the same entry, leading to potential exploitation. This mismanagement of memory can result in unauthorized access or manipulation of the underlying data structures, posing a significant risk to system stability and security. The vulnerability has been addressed in subsequent kernel updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References