CVE-2025-38504

MEDIUM

Linux Kernel 6.15-6.15.6 - Use-After-Free in io_uring Page Pool Destruction

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring/zcrx: fix pp destruction warnings With multiple page pools and in some other cases we can have allocated niovs on page pool destruction. Remove a misplaced warning checking that all niovs are returned to zcrx on io_pp_zc_destroy(). It was reported before but apparently got lost.

References (2)

Core 2

Core References

Patch

https://git.kernel.org/stable/c/ad9f1b5bed082b9c910e2a24bae0286a70846909

Patch

https://git.kernel.org/stable/c/203817de269539c062724d97dfa5af3cdf77a3ec

Scores

CVSS v3 5.5

EPSS 0.0013

EPSS Percentile 2.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (9)

linux/Kernel 6.15.0 - 6.15.7linux

Linux/Linux < 6.15

Linux/Linux 34a3e60821ab9f335a58d43a88cccdbefdebdec3 - 203817de269539c062724d97dfa5af3cdf77a3ec

Linux/Linux 34a3e60821ab9f335a58d43a88cccdbefdebdec3 - ad9f1b5bed082b9c910e2a24bae0286a70846909

Linux/Linux 6.15

Linux/Linux 6.15.7 - 6.15.*

Linux/Linux 6.16

linux/linux_kernel 6.16 rc1 (5 CPE variants)

linux/linux_kernel 6.15 - 6.15.7

Published Aug 16, 2025

Tracked Since Feb 18, 2026