Use-After-Free Vulnerability in Linux Kernel's RDMA ERDMA Component

CVE-2025-22088

Summary

The vulnerability in the Linux kernel's RDMA component involves a use-after-free error related to the erdma_accept_newconn() function. Specifically, after calling erdma_cep_put(new_cep), the object new_cep is freed. If a subsequent dereference is attempted, it leads to a use-after-free condition, potentially allowing for arbitrary code execution or system compromise if exploited. This flaw underscores the importance of secure memory management in kernel space to prevent unintended access to deallocated resources.

References