by Kastro CVE-2025-22088
Linux Linux — RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.
Affected
ProductAffectedFixed inSource
Linux920d93eac8b97778fef48f34f10e58ddf870fc2a – < bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4CNA
Linux920d93eac8b97778fef48f34f10e58ddf870fc2a – < 667a628ab67d359166799fad89b3c6909599558a667a628ab67d359166799fad89b3c6909599558aCNA
Linux920d93eac8b97778fef48f34f10e58ddf870fc2a – < a114d25d584c14019d31dbf2163780c47415a187a114d25d584c14019d31dbf2163780c47415a187CNA
Linux920d93eac8b97778fef48f34f10e58ddf870fc2a – < 78411a133312ce7d8a3239c76a8fd85bca1cc10f78411a133312ce7d8a3239c76a8fd85bca1cc10fCNA
Linux920d93eac8b97778fef48f34f10e58ddf870fc2a – < 7aa6bb5276d9fec98deb05615a086eeb893854ad7aa6bb5276d9fec98deb05615a086eeb893854adCNA
Linux920d93eac8b97778fef48f34f10e58ddf870fc2a – < 83437689249e6a17b25e27712fbee292e42e785583437689249e6a17b25e27712fbee292e42e7855CNA
Linux6.06.1.134CNA
Scores by source
Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total