CVE-2025-38106 is a use-after-free vulnerability in the Linux kernel's io_uring subsystem, specifically in the __io_uring_show_fdinfo() function. The flaw occurs because the task_struct pointed to by sq->thread can be released while still in use, leading to a use-after-free condition. This vulnerability has a CVSS score of 7.8, indicating high severity, with impacts on confidentiality, integrity, and availability. The issue was identified through kernel address sanitizer (KASAN) reports and involves improper synchronization around the task_struct lifecycle. The fix involves using RCU to safely reference the task_struct and prevent premature release during access. No specific affected versions or patch links are provided in the data.