Use-After-Free Vulnerability in Linux Kernel’s RDMA Core Component

CVE-2025-22085

Summary

A use-after-free vulnerability was discovered in the RDMA core of the Linux kernel. This flaw could be exploited when renaming device names, potentially leading to memory corruption. The issue was identified by Syzbot, which reported a slab-use-after-free scenario revealed through a detailed call trace. The affected code segments include nla_put and device registration functions within the RDMA core framework. Prompt patching is essential to mitigate any potential risks associated with this vulnerability.

References