CVE-2025-22088

HIGH EPSS 6.7%
Published Apr 16, 20251y ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Apr 16, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
6.7% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥6.0  –  <6.1.134
linuxlinux_kernel*≥6.2  –  <6.6.87
linuxlinux_kernel*≥6.7  –  <6.12.23
linuxlinux_kernel*≥6.13  –  <6.13.11
linuxlinux_kernel*≥6.14  –  <6.14.2

References 7

  • git.kernel.org https://git.kernel.org/stable/c/667a628ab67d359166799fad89b3c6909599558a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78411a133312ce7d8a3239c76a8fd85bca1cc10f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7aa6bb5276d9fec98deb05615a086eeb893854ad
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/83437689249e6a17b25e27712fbee292e42e7855
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a114d25d584c14019d31dbf2163780c47415a187
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/667a628ab67d359166799fad89b3c6909599558a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/78411a133312ce7d8a3239c76a8fd85bca1cc10f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/7aa6bb5276d9fec98deb05615a086eeb893854ad
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/83437689249e6a17b25e27712fbee292e42e7855
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/a114d25d584c14019d31dbf2163780c47415a187
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4
    Patch