Use-After-Free Vulnerability in Linux Kernel's Virtio UML Implementation

CVE-2025-39951

What is CVE-2025-39951?

A use-after-free vulnerability exists in the virtio UML implementation of the Linux kernel. During the device probing process, if the registration of a virtio device fails, the code incorrectly sets the registered status to true despite the failure. This oversight may result in possible memory corruption, leading to undefined behavior, crashes, or exploitation opportunities in applications utilizing the virtio framework.

References