CVE-2025-40054

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.30-android16-5

Description The Linux kernel contains a use-after-free (UAF) issue within the f2fs merge page bio() function. This flaw arises from a race condition during writeback operations, specifically when handling encrypted pages. The issue occurs when a bounced page, belonging to a file input/output (FIO) operation, is freed before being accessed in the f2fs is cp guarantee() function. This can lead to a kernel NULL pointer dereference. The vulnerability can be reproduced by running concurrent xfs io commands with pwrite and fdatasync operations on an encrypted file within an f2fs filesystem.

Recommendations Update to Linux kernel version 6.12.30-android16-5 or later.