Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2025/11/12 10:23 a.m.23 views

CVE-2025-40139 smc: Use __sk_dst_get() and dst_dev_rcu() in in smc_clc_prfx_set().

In the Linux kernel, the following vulnerability has been resolved: smc: Use skdstget and dstdevrcu in in smcclcprfxset. smcclcprfxset is called during connect and not under RCU nor RTNL. Using skdstgetsk-dev could trigger UAF. Let's use skdstget and devdstrcu under rcureadlock after...

7.8CVSS0.00144EPSS
SaveExploits0References2
OSV
OSV
added 2025/10/28 11:48 a.m.7 views

CVE-2025-40064 smc: Fix use-after-free in __pnet_find_base_ndev().

In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in pnetfindbasendev. syzbot reported use-after-free of netdevice in pnetfindbasendev, which was called during connect. 0 smcpnetfindismresource fetches skdstgetsk-dev and passes down to pnetfindbasendev,...

7.8CVSS6.1AI score
SaveExploits0References5
Rows per page
Query Builder