CVE-2025-38181 calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().

In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipsoreqset,delattr. syzkaller reported a null-ptr-deref in sockomalloc while allocating a CALIPSO option. 0 The NULL is of struct sock, which was fetched by sktofullsk in calipsoreqsetattr. Since...

CVE-2025-38181

CVE-2025-38181 affects the CALIPSO path in the Linux kernel. The root cause is a null pointer dereference in calipso_req_setattr() when CALIPSO option handling fetches a sock via sk_to_full_sk(), which could leave reqsk->rsk_listener NULL. The issue is tied to a previous commit around SYN Cook...