CVE-2025-38129

A flaw was found in the Linux kernel. This vulnerability, known as a use-after-free (UAF), occurs in the page_pool_recycle_in_ring function. A local attacker could exploit this by manipulating the system's memory management, causing a freed memory region to be improperly accessed. This can lead to system instability, unauthorized access to sensitive information, or potentially allow an attacker to execute malicious code.

Moderate impact. A use-after-free vulnerability in the Linux kernel's page_pool_recycle_in_ring function allows a local attacker to cause a denial-of-service or a kernel information leak problem. This flaw affects Red Hat Enterprise Linux 8, 9, and 10, as well as Red Hat In-Vehicle OS 1. Red Hat Enterprise Linux 6 and 7 are not affected as the vulnerable code is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.