Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2025-38206: Linux Kernel: Exfat File System Double Free Issue
CVE-2025-38206
Summary
A bug in the Linux kernel's exfat file system could cause a double free error, leading to potential system crashes or other issues. This has been fixed, but users should update their kernel to the latest version to ensure they have the patch. This fix is particularly important for systems that use the exfat file system, especially those with multiple users or high traffic.
What to do
No fix is available yet. Check with your software vendor for updates.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
>= 5.7, < 5.10.239 >= 5.11, < 5.15.186 >= 5.16, < 6.15.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
Original title
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix double free in delayed_free
The double free could happen in the following path.
exfat_create_upcase_table()
...
Original description
In the Linux kernel, the following vulnerability has been resolved:
exfat: fix double free in delayed_free
The double free could happen in the following path.
exfat_create_upcase_table()
exfat_create_upcase_table() : return error
exfat_free_upcase_table() : free ->vol_utbl
exfat_load_default_upcase_table : return error
exfat_kill_sb()
delayed_free()
exfat_free_upcase_table() <--------- double free
This patch set ->vol_util as NULL after freeing it.
exfat: fix double free in delayed_free
The double free could happen in the following path.
exfat_create_upcase_table()
exfat_create_upcase_table() : return error
exfat_free_upcase_table() : free ->vol_utbl
exfat_load_default_upcase_table : return error
exfat_kill_sb()
delayed_free()
exfat_free_upcase_table() <--------- double free
This patch set ->vol_util as NULL after freeing it.
nvd CVSS3.1
7.8
Vulnerability type
CWE-415
- https://git.kernel.org/stable/c/13d8de1b6568dcc31a95534ced16bc0c9a67bc15 Patch
- https://git.kernel.org/stable/c/1f3d9724e16d62c7d42c67d6613b8512f2887c22 Patch
- https://git.kernel.org/stable/c/66e84439ec2af776ce749e8540f8fdd257774152 Patch
- https://git.kernel.org/stable/c/d3cef0e7a5c1aa6217c51faa9ce8ecac35d6e1fd Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Third Party Advisory Mailing List
Published: 4 Jul 2025 · Updated: 9 Jul 2026 · First seen: 7 Mar 2026