CVE-2025-38245

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: A flaw was discovered in the Linux kernel related to the handling of the atm dev mutex within the ATM (Asynchronous Transfer Mode) subsystem. Specifically, the mutex was not being released promptly after removing procfs entries during device deregistration, creating a race condition. This could lead to a system splat (kernel panic) if a new device was registered while the procfs entries were still being removed. The issue stemmed from holding the mutex until procfs/sysfs were removed in atm dev deregister().

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.