A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.110/6.12.50/6.16.10/6.17.0. This impacts the function cancel_delayed_work. This manipulation causes use after free.

This vulnerability is registered as CVE-2025-39994. The attack requires access to the local network. No exploit is available.

You should upgrade the affected component.