CVE-2025-38475

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a type confusion issue within the smc module related to the handling of inet sock structures. Specifically, the issue stemmed from allowing non-INET sockets to reuse INET infrastructure, leading to incorrect memory access and potential system crashes (oops). The vulnerability was identified through reports from syzbot, a fuzzing tool, which detected double-free calls and related errors during memory management. The root cause was identified as a type confusion where inet sock.inet opt was incorrectly interpreted as smc sock.clcsk data ready(), which is a function pointer in the text segment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.