CVE-2025-22088

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22088
In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/667a628ab67d359166799fad89b3c6909599558a Patch
https://git.kernel.org/stable/c/78411a133312ce7d8a3239c76a8fd85bca1cc10f Patch
https://git.kernel.org/stable/c/7aa6bb5276d9fec98deb05615a086eeb893854ad Patch
https://git.kernel.org/stable/c/83437689249e6a17b25e27712fbee292e42e7855 Patch
https://git.kernel.org/stable/c/a114d25d584c14019d31dbf2163780c47415a187 Patch
https://git.kernel.org/stable/c/bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

25 Apr 2025, 18:41

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/667a628ab67d359166799fad89b3c6909599558a - () https://git.kernel.org/stable/c/667a628ab67d359166799fad89b3c6909599558a - Patch
References () https://git.kernel.org/stable/c/78411a133312ce7d8a3239c76a8fd85bca1cc10f - () https://git.kernel.org/stable/c/78411a133312ce7d8a3239c76a8fd85bca1cc10f - Patch
References () https://git.kernel.org/stable/c/7aa6bb5276d9fec98deb05615a086eeb893854ad - () https://git.kernel.org/stable/c/7aa6bb5276d9fec98deb05615a086eeb893854ad - Patch
References () https://git.kernel.org/stable/c/83437689249e6a17b25e27712fbee292e42e7855 - () https://git.kernel.org/stable/c/83437689249e6a17b25e27712fbee292e42e7855 - Patch
References () https://git.kernel.org/stable/c/a114d25d584c14019d31dbf2163780c47415a187 - () https://git.kernel.org/stable/c/a114d25d584c14019d31dbf2163780c47415a187 - Patch
References () https://git.kernel.org/stable/c/bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4 - () https://git.kernel.org/stable/c/bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4 - Patch

21 Apr 2025, 15:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: RDMA/erdma: Impide el use-after-free en erdma_accept_newconn(). Tras llamar a erdma_cep_put(new_cep), new_cep se libera y la desreferencia posterior causa un problema de UAF. Solucione este problema.
CWE CWE-416

16 Apr 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:16

Updated : 2025-04-25 18:41

NVD link : CVE-2025-22088

Mitre link : CVE-2025-22088

CVE.ORG link : CVE-2025-22088

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-416

Use After Free