CVE-2025-40168

The CVE-2025-40168 issue affects the Linux kernel in the smc_clc_prfx_match() function (net/smc/smc_clc.c); it can cause a use-after-free when dst_entry is handled outside RCU/RTNL. The recommended fix is to use __sk_dst_get() and dst_dev_rcu() to obtain the destination device. The vulnerability ...