net/smc: fix UAF on smcsk after smc_listen_out()

...

CVE-2025-38734

Summary (CVE-2025-38734): Affected component is Linux kernel net/smc. The vulnerability stems from a use-after-free risk where newclcsock->sk may be NULL after smc_listen_out_connected() releases smcsk. If a user app closes the accepted socket immediately after accept(), the code path can dere...

CVE-2025-38734: Use After Free

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix UAF on smcsk after smclistenout BPF CI testing report a UAF issue: 16.446633 BUG: kernel NULL pointer dereference, address: 000000000000003 0 16.447134 PF: supervisor read access in kernel mod e 16.447516 PF:...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates from the post-release reuse of smcsk after smclistenout in net/smc...