Search: CVE-2025-40271

A use-after-free (UAF) vulnerability was identified and resolved in the Linux kernel's proc filesystem code, specifically in the proc_readdir_de() function. The issue occurs because a directory entry node (pde) is erased from a red-black tree but not properly cleared, leading to potential access of freed memory during directory traversal. This can happen when network devices are unregistered concurrently with directory reads under /proc, causing the kernel to access released memory. The vulnerability was discovered through stress testing and involves a race condition between directory iteration and device unregistration.