CVE-2025-40272 — Multiple Releases of Same Resource or Handle in Linux
Severity
7.8HIGHOSV
OSV3.2
No vectorEPSS
0.1%
top 78.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 6
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
mm/secretmem: fix use-after-free race in fault handler
When a page fault occurs in a secret memory file created with
`memfd_secret(2)`, the kernel will allocate a new folio for it, mark the
underlying page as not-present in the direct map, and add it to the file
mapping.
If two tasks cause a fault in the same page concurrently, both could end
up allocating a folio and removing the page from the direct map, but only
one would …
Affected Packages7 packages
▶CVEListV5linux/linux1507f51255c9ff07d75909a84e7c0d7f3c4b2f49 — bb1c19636aedae39360e6fdbcaef4f2bcff25785+6