CVE-2025-38185: atm: atmtcp: Free invalid length skb in atmtcp_c_send().
atm: atmtcp: Free invalid length skb in atmtcpcsend().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Update the ATM TCP implementation so atmtcp_c_send() rejects and frees SKBs with invalid lengths, calls dev_kfree_skb(), and performs the sk_wmem_alloc adjustment needed to revert atm_account_tx() in vcc_sendmsg(), as otherwise expected in atm_pop_raw().
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38185?
CVE-2025-38185 has a severity rating that indicates a potential impact on system stability and security.
How do I fix CVE-2025-38185?
To resolve CVE-2025-38185, you should update your Linux kernel to the latest version where the vulnerability has been patched.
What systems are affected by CVE-2025-38185?
CVE-2025-38185 affects various versions of the Linux kernel that utilize the atmtcp feature.
What are the potential risks of CVE-2025-38185?
CVE-2025-38185 can lead to system crashes or instability due to improper handling of data in the atmtcp_c_send function.
When was CVE-2025-38185 announced?
CVE-2025-38185 was reported in the Linux kernel with specific details shared by security researchers and developers.