Use-After-Free Vulnerability in Linux Kernel's DRM Subsystem

CVE-2025-39740

What is CVE-2025-39740?

A use-after-free vulnerability in the Linux kernel's Direct Rendering Manager (DRM) subsystem has been identified, which could potentially lead to memory corruption. Specifically, if the error path is triggered, previously allocated memory may be de-referenced after it has been freed, leading to unexpected behavior or crashes. This issue has been addressed by modifying the flow to ensure proper reference counting is maintained, thus preventing any unsafe conditions related to memory access.

References