CVE-2025-37756

In the Linux kernel, the following vulnerability has been resolved: net: tls: explicitly disallow disconnect syzbot discovered that it can disconnect a TLS socket and then run into all sort of unexpected corner cases. I have a vague recollection of Eric pointing this out to us a long time ago...

CVE-2025-37756

CVE-2025-37756 affects the Linux kernel TLS stack. The issue arises when a TLS socket is disconnected, which can trigger unexpected corner cases if disconnect is allowed. The vulnerability is mitigated by explicitly disallowing disconnects in the net/tls path, as described in the vulnerability de...