CVE-2025-38187

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A use-after-free issue has been identified in the Linux kernel, specifically in the r535 gsp rpc push() function. This occurs when the RPC container is released after being passed to r535 gsp rpc send(), resulting in premature freeing of the container. Subsequent attempts to send remaining fragments of a large RPC will lead to a use-after-free. The issue arises when sending the initial fragment of a large RPC and passing the caller's RPC container. To resolve this, a temporary RPC container is allocated for holding the initial fragment of a large RPC when sending, and the caller's container is freed when all fragments are successfully sent.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.