The Linux kernel vulnerability CVE-2025-40012 involves improper memory handling in the smc_rx_splice() function within the smc (Shared Memory Communications) subsystem. Specifically, DMB buffers allocated with kzalloc() are not backed by pages, causing WARN_ON_ONCE() triggers in get_page() and preventing reference counting on these buffers. This flaw can lead to a use-after-free condition if the memory is freed before splice_to_pipe() completes. The issue is resolved by replacing kzalloc() with folio_alloc(), which allocates page-backed memory safe for get_page() operations.

This vulnerability can cause use-after-free conditions in the Linux kernel's smc subsystem, potentially leading to system instability, crashes, or privilege escalation due to memory corruption. The CVSS 3.1 vector indicates local attack vector with low complexity, requiring low privileges, no user interaction, and results in high confidentiality, integrity, and availability impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vulnerability description indicates that a fix has been implemented by changing the memory allocation method in the kernel source code. Users should monitor official Linux kernel releases and apply updates that include this fix once available.