Critical Use After Free and Double Free Vulnerability in Linux Kernel (Debian 12 & 13)
Summary
CVE-2025-22097: In the Linux kernel, the following vulnerability has been resolved: drm/vkms: Fix use after free and double free on init error If the driver initialization fails, the vkms_exit() function might access an uninitialized or... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware resources and providing essential services to software applications. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's stability and security are paramount, as vulnerabilities can lead to system crashes, data loss, or unauthorized access. This specific vulnerability affects the vkms driver, which is used for virtual kernel mode setting, and poses significant risks if exploited.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the vkms driver that can lead to a use after free and double free condition during driver initialization. If the initialization of the driver fails, the vkms_exit() function may attempt to access an uninitialized or already freed default_config pointer, potentially leading to memory corruption or system instability. This vulnerability can be exploited by malicious users to crash the system or execute arbitrary code, making it critical to address.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the patch as soon as it becomes available.
Conclusion
The CVE-2025-22097 vulnerability in the Linux kernel's vkms driver poses significant risks due to potential memory corruption and system instability. It is essential for users to update their kernel packages promptly to mitigate these risks and ensure system security.
See every vulnerability recorded for linux →
FAQ
CVE-2025-22097 is a vulnerability in the Linux kernel's vkms driver that can lead to use after free and double free conditions during driver initialization.
Exploitation of this vulnerability can lead to system crashes, memory corruption, or unauthorized access, posing significant security risks.
Yes, users are advised to update their Linux kernel package to the latest version to receive the necessary security patches.
While there are no specific workarounds, it is crucial to monitor for updates and apply them as soon as possible to mitigate risks.
You can use Vulert, which allows you to monitor and alert for open-source vulnerabilities in your software using just a manifest file. Visit Vulert Scanner to check if your application is affected.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
