Threats tagged 'ghsa-mh27-4q3p-7mc8'

CVE-2025-22089 is a vulnerability in the Linux kernel's RDMA core subsystem where hardware counters (hw_counters) were inadvertently exposed outside the initial network namespace. Attempts to read these counters in non-init namespaces cause a kernel NULL pointer dereference and crash. The root cause is improper handling of device pointers leading to memory corruption. The issue was fixed by restricting access to hw_counters outside the init net namespace.