Use-After-Free Vulnerability in Linux Kernel Affecting Secret Memory Management

CVE-2025-40272

What is CVE-2025-40272?

In the Linux kernel, a race condition was identified in the handling of faults within secret memory files created using memfd_secret(2). When concurrent memory accesses occur on the same page, tasks may inadvertently free memory and create accessibility issues. The flaw results in potential access violations due to the incorrect sequencing of memory management operations. By fixing the operation order, the direct map is correctly restored before memory is freed, addressing the vulnerability and enhancing the overall stability and security of the kernel.

References