CVE-2025-39828: atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
atm: atmtcp: Prevent arbitrary write in atmtcprecvcontrol().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
Add a new ->pre_send() hook for atmtcp to validate message length and reject malformed messages submitted through sendmsg() before atmtcp_recv_control() processes them.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39828?
CVE-2025-39828 has a high severity rating due to its potential to allow arbitrary write operations in the Linux kernel.
How do I fix CVE-2025-39828?
To fix CVE-2025-39828, you should upgrade to the latest version of the Linux kernel that addresses this vulnerability.
What are the potential impacts of CVE-2025-39828?
CVEs such as CVE-2025-39828 can lead to system compromise by allowing unauthorized write access to kernel memory.
Which versions of the Linux kernel are affected by CVE-2025-39828?
CVE-2025-39828 affects various versions of the Linux kernel that contain vulnerabilities in the atmtcp component.
Is CVE-2025-39828 being actively exploited?
As of the latest reports, there are indications that CVE-2025-39828 may be targeted by active exploitation, making timely remediation essential.