CVE-2025-22088

In the Linux kernel, the following vulnerability has been resolved:

RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()

After the erdma_cep_put(new_cep) being called, new_cep will be freed, and the following dereference will cause a UAF problem. Fix this issue.

This vulnerability is rated as Important rather than Moderate because successful exploitation of the use-after-free flaw allows a local authenticated user to corrupt kernel memory, potentially achieving local privilege escalation or triggering a kernel crash. Standard Red Hat Enterprise Linux installations are not vulnerable because the Elastic RDMA driver is not enabled or included in supported kernel builds. Exploitation requires local access alongside the presence and configuration of underlying Elastic RDMA hardware or emulated interfaces.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.