CVE-2025-22088: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

Critical severity · published Apr 16, 2025

CVE-2025-22088

RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

9.8

CVSS

0.5%

EPSS

On KEV

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 45% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

6.0 before 6.1.134; 6.2 before 6.6.87; 6.7 before 6.12.23; 6.13 before 6.13.11; 6.14 before 6.14.2 · source: NVD

Linux · Linux

920d93eac8b97778fef48f34f10e58ddf870fc2a before bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 667a628ab67d359166799fad89b3c6909599558a; 920d93eac8b97778fef48f34f10e58ddf870fc2a before a114d25d584c14019d31dbf2163780c47415a187; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 78411a133312ce7d8a3239c76a8fd85bca1cc10f; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 7aa6bb5276d9fec98deb05615a086eeb893854ad; 920d93eac8b97778fef48f34f10e58ddf870fc2a before 83437689249e6a17b25e27712fbee292e42e7855; +1 more · source: vendor

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-22088

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-22088

Patch

https://git.kernel.org/stable/c/667a628ab67d359166799fad89b3c6909599558a

Patch