CVE-2025-22088

RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

State: Published
Severity: 9.8 Critical
Published: Apr 16, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
LinuxLinux	920d93eac8b97778fef48f34f10e58ddf870fc2a to before bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4Affected 920d93eac8b97778fef48f34f10e58ddf870fc2a to before 667a628ab67d359166799fad89b3c6909599558aAffected 920d93eac8b97778fef48f34f10e58ddf870fc2a to before a114d25d584c14019d31dbf2163780c47415a187Affected 920d93eac8b97778fef48f34f10e58ddf870fc2a to before 78411a133312ce7d8a3239c76a8fd85bca1cc10fAffected 920d93eac8b97778fef48f34f10e58ddf870fc2a to before 7aa6bb5276d9fec98deb05615a086eeb893854adAffected 920d93eac8b97778fef48f34f10e58ddf870fc2a to before 83437689249e6a17b25e27712fbee292e42e7855Affected
LinuxLinux	6.0Affected before 6.0Not affected 6.1.134 through 6.1.Not affected 6.6.87 through 6.6.Not affected 6.12.23 through 6.12.Not affected 6.13.11 through 6.13.Not affected 6.14.2 through 6.14.*Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

920d93eac8b97778fef48f34f10e58ddf870fc2a to before bc1db4d8f1b0dc480d7d745a60a8cc94ce2badd4Affected
920d93eac8b97778fef48f34f10e58ddf870fc2a to before 667a628ab67d359166799fad89b3c6909599558aAffected
920d93eac8b97778fef48f34f10e58ddf870fc2a to before a114d25d584c14019d31dbf2163780c47415a187Affected
920d93eac8b97778fef48f34f10e58ddf870fc2a to before 78411a133312ce7d8a3239c76a8fd85bca1cc10fAffected
920d93eac8b97778fef48f34f10e58ddf870fc2a to before 7aa6bb5276d9fec98deb05615a086eeb893854adAffected
920d93eac8b97778fef48f34f10e58ddf870fc2a to before 83437689249e6a17b25e27712fbee292e42e7855Affected

LinuxLinux

6.0Affected
before 6.0Not affected
6.1.134 through 6.1.*Not affected
6.6.87 through 6.6.*Not affected
6.12.23 through 6.12.*Not affected
6.13.11 through 6.13.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.