Threats tagged 'ghsa-wf4q-q8qj-834v'

CVE-2025-38554 is a use-after-free (UAF) vulnerability in the Linux kernel's memory management subsystem involving virtual memory areas (VMAs). The flaw arises from a race condition where a VMA can be recycled and freed while its reference count is dropped, leading to a UAF when the kernel incorrectly assumes the VMA's memory management structure (mm) is still valid. This issue was discovered by Jann Horn and fixed by stabilizing the mm pointer before decrementing the VMA reference count.