2 matches found
CVE-2025-40214
CVE-2025-40214 is a Linux kernel vulnerability in AF_UNIX handling where unix_add_edge() fails to initialize vertex->scc_index. This allows unix_vertex_dead() to misjudge that sk-A and sk-B are in the same SCC, risking incorrect dead/GC decisions during in-flight socket GC. The repro and root ...
PT-2025-49020
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s AF UNIX garbage collection mechanism could incorrectly collect a receive queue of an active socket. This occurs due to a failure to initialize the scc index in the uni...