CVE-2025-40012

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix warning in smcrxsplice when calling getpage smcloregisterdmb allocates DMB buffers with kzalloc, which are later passed to getpage in smcrxsplice. Since kmalloc memory is not page-backed, this triggers WARNONONCE in...

CVE-2025-40012

CVE-2025-40012 (Linux kernel, net/smc) : The issue occurs in smc_rx_splice() where DMB buffers are allocated with kzalloc() (not page-backed) and later passed to get_page(), which can trigger WARN_ON_ONCE() and break refcounting, risking use-after-free if the memory is released before splice_to_p...