CVE-2025-38206

A flaw was found in the Linux kernel's exFAT filesystem driver. A local attacker with low privileges could exploit a double free vulnerability within the delayed_free function. This memory corruption flaw can lead to a denial of service (DoS), potentially causing system instability or crashes. It may also result in information disclosure.

This Moderate impact double free vulnerability in the Linux kernel's exFAT filesystem driver affects Red Hat Enterprise Linux 9 and 10. A local attacker with a special group privileges could exploit this flaw, leading to a denial of service, system instability, or crashes.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.