CVE-2025-22085

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc4

Description A use-after-free issue has been identified in the Linux kernel, specifically in the RDMA/core component when renaming a device. This issue was reported by Syzbot, which detected a slab-use-after-free error. The error occurs in the nla put function, located in lib/nlattr.c. The vulnerability is related to the rdma nl notify event and ib device notify register functions.

Recommendations To resolve this issue, update the Linux kernel to a version later than 6.14.0-rc4. As a temporary workaround, consider restricting access to the RDMA/core component until a patch is available.