Threats tagged 'ghsa-frjr-3w6j-qh2v'

CVE-2025-37772 is a vulnerability in the Linux kernel's RDMA/cma subsystem where a workqueue crash occurs due to improper handling of work items in cma_netevent_work_handler. The issue arises when multiple calls to cma_netevent_callback() happen in quick succession, causing the reuse and overwriting of the same work_struct, leading to a NULL pointer dereference and kernel crash. The flaw is fixed by initializing the work item earlier to avoid race conditions.