7.8
CWE
416
Advisory Published
Updated

CVE-2025-21726: padata: avoid UAF for reorder_work

First published: Thu Feb 27 2025(Updated: )

In the Linux kernel, the following vulnerability has been resolved: padata: avoid UAF for reorder_work Although the previous patch can avoid ps and ps UAF for _do_serial, it can not avoid potential UAF issue for reorder_work. This issue can happen just as below: crypto_request crypto_request crypto_del_alg padata_do_serial ... padata_reorder // processes all remaining // requests then breaks while (1) { if (!padata) break; ... } padata_do_serial // new request added list_add // sees the new request queue_work(reorder_work) padata_reorder queue_work_on(squeue->work) ... <kworker context> padata_serial_worker // completes new request, // no more outstanding // requests crypto_del_alg // free pd <kworker context> invoke_padata_reorder // UAF of pd To avoid UAF for 'reorder_work', get 'pd' ref before put 'reorder_work' into the 'serial_wq' and put 'pd' ref until the 'serial_wq' finish.

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected SoftwareAffected VersionHow to fix
Linux Kernel
Linux Kernel>=5.4.19<5.5
Linux Kernel>=5.5.3<5.10.235
Linux Kernel>=5.11<5.15.79
Linux Kernel>=5.16<6.1.129
Linux Kernel>=6.2<6.6.76
Linux Kernel>=6.7<6.12.13
Linux Kernel>=6.13<6.13.2

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2025-21726?

    CVE-2025-21726 has a medium severity rating due to its potential to cause a use-after-free condition in the Linux kernel.

  • How do I fix CVE-2025-21726?

    To fix CVE-2025-21726, ensure that you update to the latest version of the Linux kernel that includes the relevant patches.

  • What systems are affected by CVE-2025-21726?

    CVE-2025-21726 affects all versions of the Linux kernel prior to the patched releases.

  • What type of vulnerability is CVE-2025-21726?

    CVE-2025-21726 is a use-after-free vulnerability in the padata subsystem of the Linux kernel.

  • What could happen if CVE-2025-21726 is exploited?

    Exploitation of CVE-2025-21726 could potentially lead to arbitrary code execution or a system crash.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203