Use-After-Free Vulnerability in Linux Kernel ixgbe Product by Intel

CVE-2025-40091

What is CVE-2025-40091?

A use-after-free vulnerability was identified in the Intel ixgbe network driver within the Linux kernel. This issue arises when the devlink_free() function is prematurely called during the removal process of the ixgbe_adapter, potentially leading to severe stability and security concerns. The vulnerability allows for memory corruption, which could be exploited, resulting in unauthorized access or crashes. As a result, it is critical for users to update to secure versions of the Linux kernel that address this issue.

References