CVE-2025-38206
HIGHLinux Kernel 5.7-5.10.239 5.11-5.15.186 5.16-6.15.4 - Use-After-Free in exFAT Upcase Table Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : free ->vol_utbl exfat_load_default_upcase_table : return error exfat_kill_sb() delayed_free() exfat_free_upcase_table() <--------- double free This patch set ->vol_util as NULL after freeing it.
References (5)
Core 5
Core References
Third Party Advisory, Mailing List
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
Scores
CVSS v3
7.8
EPSS
0.0016
EPSS Percentile
5.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-415
Status
published
Products (15)
debian/debian_linux
11.0
linux/Kernel
5.11.0 - 5.15.186linux
linux/Kernel
5.16.0 - 6.15.4linux
linux/Kernel
5.7.0 - 5.10.239linux
Linux/Linux
< 5.7
Linux/Linux
1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 - 13d8de1b6568dcc31a95534ced16bc0c9a67bc15
Linux/Linux
1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 - 1f3d9724e16d62c7d42c67d6613b8512f2887c22
Linux/Linux
1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 - 66e84439ec2af776ce749e8540f8fdd257774152
Linux/Linux
1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 - d3cef0e7a5c1aa6217c51faa9ce8ecac35d6e1fd
Linux/Linux
5.10.239 - 5.10.*
... and 5 more
Published
Jul 04, 2025
Tracked Since
Feb 18, 2026