An issue was discovered in the Linux Kernel from 4.18 to 4.19, an improper update of sock reference in TCP pacing can lead to memory/netns leak, which can be used by remote clients.
CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HLinux Kernel
OSLinux4.18 – 4.19Netapp Active Iq Unified Manager
APPNetappall versionsNetapp Bootstrap Os
OSNetappall versionsNetapp Cloud Volumes Ontap Mediator
APPNetappall versionsNetapp Element Software
APPNetappall versionsNetapp E Series Santricity Os Controller
APPNetapp11.0 – 11.70.2Netapp H300e
HWNetappall versionsNetapp H300e Firmware
OSNetappall versionsNetapp H300s
HWNetappall versionsNetapp H300s Firmware
OSNetappall versionsNetapp H410c
HWNetappall versionsNetapp H410c Firmware
OSNetappall versionsNetapp H410s
HWNetappall versionsNetapp H410s Firmware
OSNetappall versionsNetapp H500e
HWNetappall versionsNetapp H500e Firmware
OSNetappall versionsNetapp H500s
HWNetappall versionsNetapp H500s Firmware
OSNetappall versionsNetapp H700e
HWNetappall versionsNetapp H700e Firmware
OSNetappall versionsNetapp H700s
HWNetappall versionsNetapp H700s Firmware
OSNetappall versionsNetapp Hci Compute Node
HWNetappall versionsNetapp Hci Management Node
APPNetappall versionsNetapp Solidfire
APPNetappall versionsNetapp Storagegrid
APPNetappall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
References
Related vulnerabilities
CVE-2025-10585CRITICAL9.8⚠ KEVPL ✓same product
Type confusion w V8 (Google Chrome) — zdalne uszkodzenie sterty
CVE-2025-34028CRITICAL9.3⚠ KEVPL ✓same product
Commvault Command Center – nieuwierzytelniony RCE przez path traversal w ZIP
CVE-2024-54085CRITICAL10.0⚠ KEVPL ✓same product
AMI MegaRAC SPx — zdalne ominięcie uwierzytelnienia w interfejsie Redfish BMC
CVE-2025-24813CRITICAL9.8⚠ KEVPL ✓same product
Apache Tomcat: Path Equivalence prowadzący do RCE i ujawnienia danych
CVE-2022-47986CRITICAL9.8⚠ KEVPL ✓same product
RCE przez YAML deserialization w IBM Aspera Faspex