Remote Code Execution Vulnerability in Linux Kernel Affecting SMC Socket Implementation

CVE-2025-38475

What is CVE-2025-38475?

A type confusion vulnerability exists in the Linux kernel's handling of SMC sockets and INET sockets, leading to the potential for remote code execution. The issue arises due to improper management of socket data structures, allowing an attacker to exploit the confusion between the inet_sock and smc_sock types. This flaw could be leveraged for access to sensitive memory regions, thereby heightening security risks and exposing systems to attack. The vulnerability has been addressed in recent kernel updates, emphasizing the importance of timely patching for affected users.

References