CVE-2025-38206 exfat: fix double free in delayed_free

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Address Issues in exFAT File System Two vulnerabilities in the exFAT file system have been identified and addressed. CVE-2024-57940, published on January 21, 2025, fixes an infinite loop in the exfat_readdir() function, while CVE-2025-38692, published on September 4, 2025, adds a cluster chain loop check for directories. 4 sources 41

Extracted Entities

CVEs (1)

Platforms (1)