CVE-2025-37790

In the Linux kernel, the following vulnerability has been resolved:

net: mctp: Set SOCK_RCU_FREE

Bind lookup runs under RCU, so ensure that a socket doesn't go away in the middle of a lookup.

This vulnerability does not affect supported Red Hat Enterprise Linux releases because the affected Management Component Transport Protocol (MCTP) functionality is not present in enterprise kernels. In upstream kernels, a concurrency issue during socket bind lookups under RCU could lead to an untimely socket release and kernel crash. As Red Hat kernels do not incorporate the vulnerable subsystem code, systems remain unaffected.