CVE-2025-38346

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A use-after-free (UAF) vulnerability exists in the Linux kernel related to ftrace and kallsyms. The issue occurs when a module triggers ftrace to disable, and then is removed. Specifically, when a module is removed, ftrace release mod() is called. If ftrace disable is set, this function returns without releasing associated resources. Subsequently, accessing kallsyms can lead to a UAF condition as it attempts to access freed module memory via functions like strscpy(), where the module pointer (mod) is no longer valid. This can happen when tracing init functions after a module has been loaded and then unloaded.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.