Use-After-Free Vulnerability in Linux Kernel Affecting Networking Components

CVE-2025-40064

What is CVE-2025-40064?

A critical use-after-free vulnerability exists in the Linux kernel's networking functionality, specifically within the __pnet_find_base_ndev() function. This flaw allows an attacker to exploit memory management issues when connecting to a network. The issue arises when a network device (net_device) is accessed after it has been freed, leading to potential unauthorized access to sensitive memory regions. Developers are urged to update their systems to the latest versions to mitigate this risk.

References