Use-after-free Vulnerability in Linux Kernel Affecting vmwgfx

CVE-2025-40111

What is CVE-2025-40111?

A use-after-free vulnerability has been identified in the Linux kernel's vmwgfx driver, leading to potential memory corruption issues during resource validation. Nodes in the validation duplicates hashtable, which are expected to be cleared, were not properly managed, as one escaped this process due to its resource being destroyed prematurely. This oversight allows for potential exploitation, affecting the stability and security of systems utilizing this driver.

References