CVE-2025-38542

MediumCVSS 5.5/10Last modified Jul 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: appletalk: Fix device refcount leak in atrtr_create()

When updating an existing route entry in atrtr_create(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling dev_put() to release the old device reference before holding the new one.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

VendorProductVersions
LinuxLinux>= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < b92bedf71f25303e203a4e657489d76691a58119; >= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < a7852b01793669248dce0348d14df89e77a32afd; >= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < b2f5dfa87367fdce9f8b995bc6c38f64f9ea2c90; >= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < d2e9f50f0bdad73b64a871f25186b899624518c4; >= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < 4a17370da6e476d3d275534e9e9cd2d02c57ca46; >= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < 473f3eadfc73b0fb6d8dee5829d19a5772e387f7; >= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < 64124cf0aab0dd1e18c0fb5ae66e45741e727f8b; >= c7f905f0f6d49ed8c1aa4566c31f0383a0ba0c9d, < 711c80f7d8b163d3ecd463cd96f07230f488e750
LinuxLinux2.6.12

References

Timeline

Published
Aug 16, 2025
Last modified
Jul 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-385435.5In the Linux kernel, the following vulnerability has been resolved: drm/tegra: nvdec: Fix dma_alloc_coherent error check Check for NULL reCVE-2025-385445.5In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix bug due to prealloc collision When userspace is using AF_RXCVE-2025-385455.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_sCVE-2025-385465.5In the Linux kernel, the following vulnerability has been resolved: atm: clip: Fix memory leak of struct clip_vcc. ioctl(ATMARP_MKIP) alloCVE-2025-385475.5In the Linux kernel, the following vulnerability has been resolved: iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps CVE-2025-385487.8In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Validate the size of the received input buffer ACVE-2025-385495.5In the Linux kernel, the following vulnerability has been resolved: efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error pathsCVE-2025-38554.3A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unCVE-2025-385507.8In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: Delay put pmc->idev in mld_del_delrec() pmc->idev is stilCVE-2025-385515.5In the Linux kernel, the following vulnerability has been resolved: virtio-net: fix recursived rtnl_lock() during probe() The deadlock appCVE-2025-385527.8In the Linux kernel, the following vulnerability has been resolved: mptcp: plug races between subflow fail and subflow creation We have raCVE-2025-385547.8In the Linux kernel, the following vulnerability has been resolved: mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped B
CVE-2025-38542: Medium severity, CVSS 5.5 | Vulnix