Riskcovery

CVE-2025-37790

net: mctp: Set SOCK_RCU_FREE

State
Published
Severity
8.8 High
Published
May 1, 2025
Updated
Aug 5, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: mctp: Set SOCK_RCU_FREE

Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup.

Scores

CVSSScoreVectorSource
3.18.8 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 833ef3b91de692ef33b800bca6b1569c39dece74 to before 5c1313b93c8c2e3904a48aa88e2fa1db28c607aeAffected
  • 833ef3b91de692ef33b800bca6b1569c39dece74 to before b9764ebebb007249fb733a131b6110ff333b6616Affected
  • 833ef3b91de692ef33b800bca6b1569c39dece74 to before a8a3b61ce140e2b0a72a779e8d70f60c0cf1e47aAffected
  • 833ef3b91de692ef33b800bca6b1569c39dece74 to before 3f899bd6dd56ddc46509b526e23a8f0a97712a6dAffected
  • 833ef3b91de692ef33b800bca6b1569c39dece74 to before e3b5edbdb45924a7d4206d13868a2aac71f1e53dAffected
  • 833ef3b91de692ef33b800bca6b1569c39dece74 to before 52024cd6ec71a6ca934d0cc12452bd8d49850679Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.181 through 5.15.*Not affected
  • 6.1.135 through 6.1.*Not affected
  • 6.6.88 through 6.6.*Not affected
  • 6.12.25 through 6.12.*Not affected
  • 6.14.4 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.