REDHAT-BUG-2414482: Medium severity linux_kernel vulnerability

Published Nov 12, 2025

Updated

In the Linux kernel, the following vulnerability has been resolved:

smc: Use skdstget() and dstdevrcu() in smcclcprfxmatch().

smcclcprfxmatch() is called from smclistenwork() and not under RCU nor RTNL.

Using skdstget(sk)->dev could trigger UAF.

Let's use skdstget() and dstdevrcu().

Note that the returned value of smcclcprfxmatch() is not used in the caller.

Affected Software

1 affected component

linux_kernel

Event History

Nov 12, 2025

Data Sourced

via Red Hat·11:02 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2414482?

The severity of REDHAT-BUG-2414482 is medium, rated at 4.

What is the description of REDHAT-BUG-2414482?

REDHAT-BUG-2414482 addresses a use-after-free issue in the Linux kernel related to the smc_clc_prfx_match() function.

How do I fix REDHAT-BUG-2414482?

To fix REDHAT-BUG-2414482, ensure that your system is updated to the latest version of the Linux kernel that includes the patch for this vulnerability.

What software is affected by REDHAT-BUG-2414482?

The software affected by REDHAT-BUG-2414482 is the Linux kernel.

When was REDHAT-BUG-2414482 published?

REDHAT-BUG-2414482 was published on November 12, 2025.