2 matches found
CVE-2025-38475 smc: Fix various oops due to inet_sock type confusion.
In the Linux kernel, the following vulnerability has been resolved: smc: Fix various oops due to inetsock type confusion. syzbot reported weird splats 01 in cipsov4socksetattr while freeing inetsksk-inetopt. The address was freed multiple times even though it was read-only memory...
7.8CVSS6.5AI score
SaveExploits0References6
CVE-2025-38475
CVE-2025-38475 concerns the Linux kernel SMC socket type confusion where smc_sock hijacks AF_INET/AF_INET6 internals, causing inet_opt to be interpreted as a function pointer due to inet_sock not being the first member of smc_sock. The root cause is the misalignment between smc_sock and inet_sock...
7.8CVSS6.5AI score0.00142EPSS
SaveExploits0References3Affected Software1
20