CVE-2025-40248

A flaw was found in the Linux kernel's vsock component. This vulnerability occurs when a connect() operation on an already established socket is interrupted by a signal or timeout, causing the system to mishandle the socket's state. This incorrect handling can lead to a race condition, potentially resulting in memory corruption, such as a use-after-free or null-pointer dereference. A local attacker could exploit this to cause a denial of service or potentially escalate privileges.

This vulnerability is rated Important for Red Hat Enterprise Linux 7, 8, 9, and 10. A flaw in the Linux kernel's vsock component allows a local attacker to cause memory corruption, potentially leading to a denial of service or privilege escalation. This occurs when a connect() operation on an established socket is interrupted by a signal or timeout, leading to an incorrect handling of the socket's state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.