CVE-2025-40111

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a use-after-free issue within the drm/vmwgfx component, specifically in the validation process. Nodes stored in the validation duplicates hashtable, originating from an arena allocator, are not consistently cleared as expected. This occurs because the resource associated with a node may be destroyed prematurely, causing the node to escape proper cleanup during vmw validation drop ht. This can lead to a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.