#VU107680 Use-after-free in Linux kernel - CVE-2025-22020

Vulnerability identifier: #VU107680

Vulnerability risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-22020

CWE-ID: CWE-416

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rtsx_usb_ms_drv_remove() function in drivers/memstick/host/rtsx_usb_ms.c. A local user can escalate privileges on the system.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel: 6.12 - 6.12.21

---

External links
https://git.kernel.org/stable/c/0067cb7d7e7c277e91a0887a3c24e71462379469
https://git.kernel.org/stable/c/31f0eaed6914333f42501fc7e0f6830879f5ef2d
https://git.kernel.org/stable/c/4676741a3464b300b486e70585c3c9b692be1632
https://git.kernel.org/stable/c/52d942a5302eefb3b7a3bfee310a5a33feeedc21
https://git.kernel.org/stable/c/6186fb2cd36317277a8423687982140a7f3f7841
https://git.kernel.org/stable/c/75123adf204f997e11bbddee48408c284f51c050
https://git.kernel.org/stable/c/914c5e5bfceb9878f3056eaf4d1c88f2cbe0a185
https://git.kernel.org/stable/c/9dfaf4d723c62bda8d9d1340e2e78acf0c190439
https://git.kernel.org/stable/c/b094e8e3988e02e8cef7a756c8d2cea9c12509ab
https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.22

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?