PT-2025-42781 · Linux+1 · Linux Kernel+1
Published
2025-09-17
·
Updated
2026-05-26
·
CVE-2025-40012
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.17.0-rc3-11705-g9cf4672ecfee #10
Description
The Linux kernel contains an issue within the net/smc component. Specifically, the
smc rx splice() function may trigger a warning when calling get page() due to memory allocated by kzalloc() not being page-backed. This can lead to a use-after-free condition if the memory is released before splice to pipe() completes. The issue arises because DMB buffers are allocated with kzalloc() and subsequently passed to get page(). The fix involves using folio alloc() to ensure DMBs are page-backed and safe for use with get page().Recommendations
Update to Linux kernel version 6.17.0-rc3-11705-g9cf4672ecfee #10 or a later version that includes the fix.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Suse