Linux Kernel Eventpoll Use-After-Free Vulnerability

Vulnerability

A use-after-free vulnerability has been identified in the Linux kernel's epoll implementation. The issue arises because epoll incorrectly decrements the reference count of an epoll instance before releasing the associated mutex. This can lead to a use-after-free condition, as another user may free the epoll instance while the mutex is still being accessed. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a use-after-free condition, potentially allowing for arbitrary code execution or memory corruption.

Added: Jul 18, 2025, 8:19 AM
Updated: Jul 18, 2025, 8:19 AM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.5
remediation
0.0
relevance
0.3
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.