PT-2025-49371 · Linux+2 · Linux Kernel+2

Published

2025-12-06

·

Updated

2026-02-24

·

CVE-2025-40270

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free (UAF) issue exists in the Linux kernel’s swap cache layer, specifically related to VMA readahead. A change introduced by commit 78524b05f1a3 inadvertently created a scenario where VMA readahead could access swap entries from a device that had been swapped off, leading to a potential UAF condition. This occurs because VMA readahead walks the page table and may encounter swap entries from different devices without holding a reference to them. The issue is not easily triggered but could potentially cause problems.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2025-40270
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8048-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu