CVE-2025-22085

Summary

CVE-2025-22085 is a Linux kernel vulnerability affecting RDMA/core. This issue involves a use-after-free problem, which was discovered by Syzbot. The vulnerability occurs during the renaming of a device name and can lead to a slab memory corruption. The affected code path includes functions such as nla_put, netlink_unicast, and __sys_sendmsg. The flaw was reported to occur when calling kasan_report, which ultimately led to a stack buffer overflow. The vulnerability can potentially be exploited by a local attacker to execute arbitrary code or cause a denial-of-service condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.