NetSight
critical9.8

CVE-2025-22088

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_ce…

Impact

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 6.0 before 6.1.134
from 6.2 before 6.6.87
from 6.7 before 6.12.23
from 6.13 before 6.13.11
from 6.14 before 6.14.2

Weakness classification

References