THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-40064 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0] smc_pnet_find_ism_resource() fetches sk_dst_g

[NVD] CVE-2025-40064 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: smc: Fix use-after-free in __pnet_find_base_ndev(). syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0] smc_pnet_find_ism_resource() fetches sk_dst_g

lownvdPublished 2025-10-28

CVE-2025-40064 CVSS: 7.8 HIGH Published: 2025-10-28T12:15:40.840

In the Linux kernel, the following vulnerability has been resolved:

smc: Fix use-after-free in __pnet_find_base_ndev().

syzbot reported use-after-free of net_device in __pnet_find_base_ndev(), which was called during connect(). [0]

smc_pnet_find_ism_resource() fetches sk_dst_get(sk)->dev and passes down to pnet_find_base_ndev(),

Indicators of compromise

CVE-2025-40064cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-40064