CVE-2025-38542: net: appletalk: Fix device refcount leak in atrtr_create()
In the Linux kernel, the following vulnerability has been resolved:
net: appletalk: Fix device refcount leak in atrtrcreate()
When updating an existing route entry in atrtrcreate(), the old device reference was not being released before assigning the new device, leading to a device refcount leak. Fix this by calling devput() to release the old device reference before holding the new one.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38542?
CVE-2025-38542 has been classified as a medium severity vulnerability.
How do I fix CVE-2025-38542?
To fix CVE-2025-38542, update to the latest version of the Linux kernel where this vulnerability has been resolved.
What component of the Linux kernel is affected by CVE-2025-38542?
CVE-2025-38542 affects the appletalk networking component in the Linux kernel.
What type of vulnerability is CVE-2025-38542?
CVE-2025-38542 is a reference counting leak vulnerability.
Is CVE-2025-38542 actively being exploited?
As of now, there are no public reports indicating that CVE-2025-38542 is actively being exploited.