Use-After-Free Vulnerability in Linux Kernel's RDMA/erdma Package
Summary
CVE-2025-22088: In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Prevent use-after-free in erdma_accept_newconn() After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following der... Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is a core component of many operating systems, providing essential services for hardware and software interaction. The RDMA (Remote Direct Memory Access) subsystem allows for high-throughput, low-latency networking, which is crucial for performance-sensitive applications. However, this subsystem is susceptible to vulnerabilities that can lead to severe security issues, such as memory corruption and unauthorized access.
Vulnerability Detail
In the Linux kernel, a use-after-free (UAF) vulnerability was discovered in the erdma_accept_newconn() function of the RDMA/erdma subsystem. This vulnerability arises when the function erdma_cep_put(new_cep) is called, leading to the freeing of the new_cep object. Any subsequent dereference of new_cep can result in unpredictable behavior, including potential memory corruption, crashes, or exploitation by attackers to execute arbitrary code.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. It is highly recommended to apply the patch as soon as it becomes available.
Conclusion
The use-after-free vulnerability in the Linux kernel's RDMA/erdma subsystem poses significant risks to system integrity and security. It is crucial for users to stay informed about such vulnerabilities and apply necessary updates promptly to safeguard their systems.
See every vulnerability recorded for linux →
FAQ
A use-after-free vulnerability occurs when a program continues to use a memory reference after it has been freed, potentially leading to memory corruption and security breaches.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. By utilizing the Vulert playground, you can check if your application is affected without any signup.
Exploitation of this vulnerability can lead to system crashes, unauthorized access to sensitive data, or execution of arbitrary code by attackers.
The vulnerability affects all versions of the Linux kernel prior to the patch release. Users should ensure they are running the latest version to mitigate risks.
If an immediate update is not possible, consider isolating the affected system from the network to reduce the risk of exploitation until a patch can be applied.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
