PT-2025-51573 · Linux+2 · Linux Kernel+2
Published
2025-10-17
·
Updated
2026-02-24
·
CVE-2025-40357
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the SMC (Stream Management Control) subsystem that can lead to a general protection fault. Specifically, a crash can occur in the
smc diag dump function due to a wild-memory-access, potentially triggered by visiting an incorrect clcsock during hash table traversal. The issue arises when the clcsock is unexpectedly changed in inet init csk locks(). The fix involves removing the INET PROTOSW ICSK flag for SMC and reverting a previous commit to prevent casting smc sock to inet connection sock. The issue was identified through syzbot testing.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu