Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38206

exfat: fix double free in delayed_free

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen in the following path. exfat_create_upcase_table() exfat_create_upcase_table() : return error exfat_free_upcase_table() : free ->vol_utbl exfat_load_default_upcase_table : return error exfat_kill_sb() delayed_free() exfat_free_upcase_table() <--------- double free This patch set ->vol_util as NULL after freeing it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < 13d8de1b6568dcc31a95534ced16bc0c9a67bc15affected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < 66e84439ec2af776ce749e8540f8fdd257774152affected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < ea27703eb0efbadcd45b9949526160ed90536a72affected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < ac65f76db9b2ff3fbc9e198c0e9aaf81b111b7d0affected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < 29abaf93357f4a7d083cf399d4306999e20db31daffected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < d3cef0e7a5c1aa6217c51faa9ce8ecac35d6e1fdaffected
  • 1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 to < 1f3d9724e16d62c7d42c67d6613b8512f2887c22affected

Linux Linux

Default version status: affected

  • 5.7affected
  • 0 to < 5.7unaffected
  • 5.10.239 to ≤ 5.10.*unaffected
  • 5.15.186 to ≤ 5.15.*unaffected
  • 6.1.187 to ≤ 6.1.*unaffected
  • 6.6.156 to ≤ 6.6.*unaffected
  • 6.12.108 to ≤ 6.12.*unaffected
  • 6.15.4 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References