CVE-2025-47358CWE-416

Use After Free in Secure Processor

High · published February 2, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.0
In the wild
Unconfirmed
What it is

⚡ A slight tweak in user space can lead to a memory corruption nightmare! Just like a chef accidentally tossing out the wrong ingredient, this flaw can cause the kernel to free memory it shouldn’t. 🔥 Think of this vulnerability like a restaurant where a cook mistakes a customer’s special order for garbage and throws it in the bin instead. It’s a recipe for disaster when critical components are lost due to a simple mix-up! If exploited, this could lead to system crashes or unpredictable behavior, allowing an attacker to bring your entire operation to a halt. Imagine a chef unable to serve dinner because the kitchen is all out of essential ingredients — chaos ensues!

Put simply

Think of this vulnerability like a restaurant where a cook mistakes a customer’s special order for garbage and throws it in the bin instead. It’s a recipe for disaster when critical components are lost due to a simple mix-up! This vulnerability arises when a modified user space address is passed to the `mem_free` API, causing it to free kernel memory inadvertently. This leads to potential crashes and corruption within the system.

What to do

If exploited, this could lead to system crashes or unpredictable behavior, allowing an attacker to bring your entire operation to a halt. Imagine a chef unable to serve dinner because the kitchen is all out of essential ingredients — chaos ensues! To mitigate this risk, ensure that your systems are updated with the latest patches provided by the vendor. Audit your code to prevent incorrect address modifications, and implement stricter checks before memory management calls. Don't let a simple mix-up bring your operations down! You’ve got this! Take these steps and you’ll keep your systems safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00103 · 1.0th percentile
Weakness
CWE-416 · Use After Free
Published
2026-02-02T15:20Z
EPSS history
Timeline
  • 02 FEB 15:20Z
    Use After Free in Secure Processor
    cvelistv5