CVE-2025-22004: net: atm: fix use after free in lec_send()
In the Linux kernel, the following vulnerability has been resolved:
net: atm: fix use after free in lecsend()
The ->send() operation frees skb so save the length before calling ->send() to avoid a use after free.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22004?
CVE-2025-22004 has a medium severity rating due to the potential for a use after free vulnerability in the Linux kernel.
How do I fix CVE-2025-22004?
To fix CVE-2025-22004, update the Linux kernel to the latest patched version where the issue has been resolved.
Which versions of the Linux kernel are affected by CVE-2025-22004?
CVE-2025-22004 affects specific versions of the Linux kernel that contain the flaw in the atm subsystem.
What types of systems are vulnerable to CVE-2025-22004?
Systems running vulnerable versions of the Linux kernel that utilize the ATM subsystem are at risk due to CVE-2025-22004.
Is CVE-2025-22004 being actively exploited?
As of now, there are no known active exploits specifically targeting CVE-2025-22004, but it is advisable to apply updates promptly.