Use-After-Free Vulnerability in Realtek Wireless Linux Kernel Driver

CVE-2025-40000

What is CVE-2025-40000?

A use-after-free vulnerability exists in the Realtek wireless driver within the Linux kernel, specifically in the rtw89_core_tx_kick_off_and_wait() function. This flaw can lead to unpredictable behavior when the function attempts to access a data structure that has already been freed, resulting in potential memory corruption. The issue arises from a race condition between the completion of data processing and the thread signaling its completion. Improper handling can allow malicious actors to exploit this oversight, potentially leading to system crashes or unauthorized access.

References