Threats tagged 'ghsa-qh2m-xfgm-crh8'

CVE-2025-22058 is a vulnerability in the Linux kernel's UDP implementation that causes a memory accounting leak due to an integer overflow. This overflow occurs when the socket's receive buffer size is set to INT_MAX, leading to incorrect memory accounting and eventual packet drops. The issue arises from a signed integer overflow in the udp_rmem_release() function during socket close operations. This flaw can cause UDP memory usage to spike and never decrease, resulting in memory allocation failures and dropped packets.