CVE-2025-59616

MediumCVSS 6.6

Published: 06/07/2026(UTC)Updated: 07/07/2026(UTC)Translated: 08/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.09%

1th percentile - higher than 1% of all known CVEs

Summary

The vulnerability causes memory corruption when processing multiple IOCTL calls with the same buffer file descriptor input, leading to access of already freed memory.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code in kernel context, potentially leading to privilege escalation or system crash.

Recommendation

Apply the vendor-supplied patch immediately and update the system to the latest version containing the fix.

Original NVD description (English source)

Memory Corruption when processing multiple IOCTL calls with the same buffer file descriptor input due to accessing already freed memory.