PT-2025-49373 · Linux+3 · Linux Kernel+3
Published
2025-06-12
·
Updated
2026-05-07
·
CVE-2025-40272
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s handling of page faults within secret memory files created using
memfd secret(2). Concurrent page faults in the same page by multiple tasks can lead to a use-after-free condition. Specifically, the kernel may allocate a new folio for the page, remove it from the direct map, and attempt to add it to the file mapping. If multiple tasks attempt this concurrently, one task may succeed while the other fails, leading to the freeing of the folio before the page is restored to the direct map. This can result in a supervisor not-present page fault if another task attempts to allocate the page during this window. The issue stems from the incorrect ordering of operations during the fault handling process.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu