CVE-2025-40018 — Use After Free in Linux
Severity
7.8HIGHOSV
OSV7.1OSV5.5OSV3.2
No vectorEPSS
0.1%
top 81.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedOct 24
Latest updateJan 12
Description
In the Linux kernel, the following vulnerability has been resolved:
ipvs: Defer ip_vs_ftp unregister during netns cleanup
On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp
before connections with valid cp->app pointers are flushed, leading to a
use-after-free.
Fix this by introducing a global `exiting_module` flag, set to true in
ip_vs_ftp_exit() before unregistering the pernet subsystem. In
__ip_vs_ftp_exit(), skip ip_vs_ftp unregister if called during netns
cleanup (whe…
Affected Packages7 packages
▶CVEListV5linux/linux61b1ab4583e275af216c8454b9256de680499b19 — 8a6ecab3847c213ce2855b0378e63ce839085de3+8