CVE-2025-38596Use After Free in Linux

CWE-416Use After Free5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 94.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedAug 19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code The object is potentially already gone after the drm_gem_object_put(). In general the object should be fully constructed before calling drm_gem_handle_create(), except the debugfs tracking uses a separate lock and list and separate flag to denotate whether the object is actually initialized. Since I'm touching this all anyway simplify this by only adding th

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

CVEListV5linux/linuxa3707f53eb3f4f3e7a30d720be0885f813d649bb5f2be12442db6a2904e6e31b0e3b5ad5aebf868b+2
debiandebian/linux

Patches

🔴Vulnerability Details

2
GHSA
GHSA-c5gg-23m2-rg93: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code The object2025-08-19
OSV
CVE-2025-38596: In the Linux kernel, the following vulnerability has been resolved: drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code The object i2025-08-19

📋Vendor Advisories

2
Red Hat
kernel: drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code2025-08-19
Debian
CVE-2025-38596: linux - In the Linux kernel, the following vulnerability has been resolved: drm/panthor...2025
CVE-2025-38596 — Use After Free in Linux | cvebase