Use-After-Free Vulnerability in Linux Kernel Impacting cdnsp Gadget Functionality

CVE-2025-40314

What is CVE-2025-40314?

A use-after-free vulnerability exists in the Linux kernel's cdnsp gadget due to improper management of memory during the initialization and exit processes. This issue arises when the gadget structure is freed prior to its associated endpoints, leading to the potential dereferencing of dangling pointers. As a result, when the freed endpoints are accessed, it can lead to unpredictable behavior and security risks. A mitigation has been introduced by restructuring the memory management operations, ensuring that endpoint structures are properly freed before releasing the gadget structure itself.

References