CVE-2025-39717 — Use After Free in Linux

CWE-416 — Use After Free5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.0%
top 94.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedSep 5

Description

In the Linux kernel, the following vulnerability has been resolved: open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE As described in commit 7a54947e727b ('Merge patch series "fs: allow changing idmappings"'), open_tree_attr(2) was necessary in order to allow for a detached mount to be created and have its idmappings changed without the risk of any racing threads operating on it. For this reason, mount_setattr(2) still does not allow for id-mappings to be changed. Howeve…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages4 packages

▶NVDlinux/linux_kernel6.15 — 6.16.4+1
▶Debianlinux/linux_kernel< 6.16.5-1
▶CVEListV5linux/linux2462651ffa76b87f9c2e4403ef6e6b89b703fb2f — 69dbdc711d9130136824e3830191a6afffa0a1f0+2
▶debiandebian/linux< linux 6.16.5-1 (forky)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-48pq-57c2-69ww: In the Linux kernel, the following vulnerability has been resolved: open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE As descr↗2025-09-05
▶
OSV
CVE-2025-39717: In the Linux kernel, the following vulnerability has been resolved: open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE As describ↗2025-09-05
▶

📋Vendor Advisories

2
Red Hat
kernel: open_tree_attr: do not allow id-mapping changes without OPEN_TREE_CLONE↗2025-09-05
▶
Debian
CVE-2025-39717: linux - In the Linux kernel, the following vulnerability has been resolved: open_tree_a...↗2025
▶
CVE-2025-39717 — Use After Free in Linux | cvebase