CVE-2025-40018

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ipvs: Defer ip_vs_ftp unregister during netns cleanup<br /> <br /> On the netns cleanup path, __ip_vs_ftp_exit() may unregister ip_vs_ftp<br /> before connections with valid cp-&gt;app pointers are flushed, leading to a<br /> use-after-free.<br /> <br /> Fix this by introducing a global `exiting_module` flag, set to true in<br /> ip_vs_ftp_exit() before unregistering the pernet subsystem. In<br /> __ip_vs_ftp_exit(), skip ip_vs_ftp unregister if called during netns<br /> cleanup (when exiting_module is false) and defer it to<br /> __ip_vs_cleanup_batch(), which unregisters all apps after all connections<br /> are flushed. If called during module exit, unregister ip_vs_ftp<br /> immediately.