PT-2025-22156

CVE-2025-37894

Published

2025-05-01

Updated

2026-04-03

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue arises when a pointer of type struct inet timewait sock is returned from the functions inet lookup established() and inet6 lookup established(), which can cause a crash when sock put() is called on it. To avoid this issue, sock gen put() is used instead of sock put() when sk->sk state is TCP TIME WAIT.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Vendors