Use-After-Free Vulnerability in Mediatek DRM Component for Linux Kernel

CVE-2025-39882

What is CVE-2025-39882?

A vulnerability exists in the Mediatek DRM component of the Linux kernel where improper reference counting can lead to a use-after-free condition. The issue arises in the for_each_child_of_node() function, which drops a reference for each node as it iterates over child nodes. An erroneous additional reference count decrement that was recently introduced can compromise memory management, leading to potential exploitation. This vulnerability necessitates corrective measures to prevent misuse and ensure system stability.

References