Critical Socket Management Vulnerability in Linux Kernel - CVE-2025-37790
Summary
CVE-2025-37790: In the Linux kernel, the following vulnerability has been resolved: net: mctp: Set SOCK_RCU_FREE Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup. Affects linux versions < 6.1.135-1. Fixed in 6.1.135-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, providing essential services for hardware management and system processes. It is known for its robustness and versatility, supporting a wide range of devices and applications. This vulnerability specifically affects the socket management functionality within the kernel, which is crucial for network communication.
Vulnerability Detail
CVE-2025-37790 is a vulnerability in the Linux kernel related to the management of sockets during bind lookup operations. The issue arises from the use of Read-Copy Update (RCU) mechanisms, which may lead to a situation where a socket can be freed while it is still being accessed during a lookup. This can result in undefined behavior, potentially leading to system crashes or security breaches, as malicious actors could exploit this flaw to disrupt network services or gain unauthorized access.
How To Fix
Minimum fixed version
6.1.135-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. It is advisable to apply the patch as soon as it becomes available to mitigate any risks associated with this issue.
Conclusion
CVE-2025-37790 is a significant vulnerability in the Linux kernel that affects socket management during bind lookup operations. It is essential for users to update their systems to the patched versions to ensure security and stability. Regular monitoring and updates are key to maintaining a secure environment.
See every vulnerability recorded for linux →
FAQ
CVE-2025-37790 is a vulnerability in the Linux kernel that affects socket management during bind lookup operations, potentially leading to system instability or security risks.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected by this vulnerability.
The vulnerability could lead to system crashes, unauthorized access, or disruption of network services if exploited by malicious actors.
Yes, a patch is available for Debian 12 (version 6.1.135-1) and later. It is important to update your system to the latest version to mitigate the risk.
While there are no specific workarounds, it is crucial to prioritize updating your system as soon as possible to protect against potential exploitation of this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
