CVE-2025-39881

A use-after-free race condition exists in the linux kernel such that When cgroup.pressure is disabled, it releases PSI triggers via cgroup_file_release(), Frees of->priv through kernfs_drain_open_files() leading to damage to the availability and integrity of the system.

A race in kernfs PSI polling allowed epoll() on a cgroup.*.pressure file to access freed state when the file was released during pressure toggling, leading to a kernel use-after-free and potential crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.