ACK: [SRU][N][PATCH 0/1] CVE-2025-22088

[Thibault Ferrante]

Acked-by: Thibault Ferrante <thibault.ferrante at canonical.com>



On 04/06/2025 17:02, Massimiliano Pellizzer wrote:
> https://ubuntu.com/security/CVE-2025-22088
> 
> [ Impact ]
> 
> RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
> 
> After the erdma_cep_put(new_cep) being called, new_cep will be freed,
> and the following dereference will cause a UAF problem. Fix this issue.
> 
> [ Fix ]
> 
> Plucky: Fixed via upstream stable updates
> Oracular: Fixed via upstream stable updates
> Noble: Clean cherry pick from mainline
> Jammy: Not affected
> 
> [ Test Plan ]
> 
> Compile tested only.
> 
> [ Where Problems Could Occur ]
> 
> A regression here is unlikely due to the very limited scope
> of the patch.
> 
>