CVE-2025-40211

CVE-2025-40211 describes a use-after-free vulnerability in the Linux kernel's ACPI video driver. Specifically, the acpi_video_switch_brightness() function can attempt to access freed memory (device->brightness or device->backlight) if a delayed work item executes after the device's resources have been deallocated. This flaw affects the Linux kernel, though specific affected product versions are not detailed. The severity of this vulnerability is currently assessed as low, with no CVSS score provided and a FAUCET Risk Score of 5/100. While a use-after-free can lead to system instability or potentially arbitrary code execution, the attack vector and complexity are not explicitly detailed, suggesting it likely requires local access or specific timing conditions. There is no evidence of active exploitation for CVE-2025-40211. No exploit code is publicly available on platforms like Metasploit, Nuclei, or ExploitDB, and there is minimal community discussion or media coverage surrounding this vulnerability.