Use-After-Free Vulnerability in Linux Kernel's IOMMU Subsystem

CVE-2025-39966

What is CVE-2025-39966?

A use-after-free vulnerability was identified in the IOMMU subsystem of the Linux kernel. When an allocation of an object fails before associating it with a file, the file's reference count can be decremented prematurely. This leads to an invalid pointer access when the work queue processes the file's release. The issue arises from improper management of file lifetimes during abort scenarios, potentially causing instability or exploitation risks. The core code has been updated to ensure proper synchronization, preventing the UAF in future operations.

References