CVE-2025-40271

CVE-2025-40271 affects the Linux kernel fs/proc code. The vulnerability arises in proc_readdir_de() where a node erased from the subdir red-black tree is not cleared (RB_CLEAR_NODE), leaving the pde_subdir_next() path able to return a freed node (UAF). Affected code path: proc_readdir(), pde_get(...