CVE-2025-40001

CVE-2025-40001 describes a use-after-free vulnerability in the Linux kernel's Marvell SAS/SATA controller (mvsas) driver. This flaw occurs during device detachment when mvs_free() attempts to deallocate memory while the mvs_work_queue() function might still be executing, leading to a race condition where freed memory is accessed. The vulnerability has no assigned CVSS score, but its nature as a use-after-free suggests potential for system instability, denial of service, or privilege escalation, though the attack vector and complexity are not explicitly detailed. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.