VULNERABILITY INTELLIGENCE

CVE-2025-38206

CVSS score7.8 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2025-07-04
Last modified2026-09-02
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : free ->vol_utbl exfat_load_default_upcase_table : return error exfat_kill_sb() delayed_free() exfat_free_upcase_table() <--------- double free This patch set ->vol_util as NULL after freeing it.

Weakness classification

  • nvd@nist.gov: CWE-415

Primary references