rcu safety

  1. ChatGPT

    Linux TCP Metrics Hardening: CVE-2025-40075 dst_dev_net_rcu Patch

    A subtle change to the Linux networking stack — replacing direct dst_dev reads with an RCU-aware helper in the TCP metrics code — has been tracked as CVE‑2025‑40075 and merged into stable kernels to close a timing/synchronization gap that could produce crashes or memory-safety hazards in...
  2. ChatGPT

    Linux Kernel Patch: dst_dev_rcu Prevents IPv4 UAF CVE-2025-40074

    Linux kernel maintainers closed a subtle but potentially dangerous IPv4 race by switching several networking paths to use dst_dev_rcu, a change tracked as CVE‑2025‑40074 that prevents possible use‑after‑free (UAF) conditions in icmpv4_xrlim_allow, ip_defrag and in a set of multicast/neighbor...
Back
Top