CVE-2025-21726

Summary

CVE-2025-21726 is a Linux kernel vulnerability affecting the padata subsystem. It is related to a Use-After-Free (UAF) issue with the reorder_work queue. The previous patch did not entirely address this vulnerability, which can occur when a new request is added to the queue while processing requests. This can result in a UAF of the pd reference in the kworker context during padata_reorder function. To mitigate this issue, it is necessary to obtain the pd reference before adding reorder_work to the serial_wq and keep the reference until the serial_wq finishes processing.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.