CVE-2025-21727

A use-after-free vulnerability was found in the Linux kernel's padata subsystem, in the padata_reorder() function. Caused by improper synchronization controls, this vulnerability can occur when a reference-counted data structure (pd) is decremented in one thread, freeing it, while another thread still holds a pointer to it and attempts to access it via padata_find_next(). This vulnerability can lead to system instability, denial of service, and potential privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.