CVE-2025-40111 — Use After Free in Linux
Severity
7.8HIGHOSV
OSV5.5OSV3.2
No vectorEPSS
0.0%
top 87.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx: Fix Use-after-free in validation
Nodes stored in the validation duplicates hashtable come from an arena
allocator that is cleared at the end of vmw_execbuf_process. All nodes
are expected to be cleared in vmw_validation_drop_ht but this node escaped
because its resource was destroyed prematurely.
Affected Packages7 packages
▶CVEListV5linux/linux64ad2abfe9a628ce79859d072704bd1ef7682044 — 1822e5287b7dfa59d0af966756ebf1dc652b60ee+8