Threats tagged 'ghsa-gh7x-chcc-crpq'

CVE-2025-37790 is a medium severity vulnerability in the Linux kernel's MCTP networking component. It involves improper handling of socket lifecycle during bind lookup under RCU (Read-Copy-Update), which could lead to a socket being freed prematurely during lookup operations. This flaw has been resolved by ensuring the SOCK_RCU_FREE flag is set to prevent the socket from going away mid-lookup.